sugarxl/dsh-safety

README 摘要

dsh-safety English 中文                 Filesystem safety harness for DeepSeek Harness execution-time guard · user-gated approvals · trash-based deletes · composition snapshots · pre-restart checks · standalone CLI What · Features · Approval workflow · Install · Quick start · CLI · Tools · Config · How it works · Structure · Testing · Troubleshooting · Security · Design · FAQ · Known limitations What A filesystem safety harness for DeepSeek Harness (DSH). It enforces a three-tier file policy at the tool-execution boundary and, crucially, makes the agent ask the human before it deletes or rewrites anything important : - destructive agent calls are denied before they run, with an educational message explaining what the target is, why it matters, and what the sanctioned alternative is; - every delete is routed through a recoverable trash; - the plugin composition can be snapshotted and rolled back transactionally; - the composition is validated before a restart; - sensitive deletes/writes require a one-shot, time-limited user approval — the model can never authorize itself. The package has zero runtime dependencies. It installs as a standard DSH p…

分类