dsh-smart-approval
Fail-closed LLM-assisted approval reviewer for DeepSeek Harness
17 results
Fail-closed LLM-assisted approval reviewer for DeepSeek Harness
HTTPS + login gateway for the DeepSeek Harness web surface: securely access your DSH Web UI from another machine on your LAN, or from the internet via port forwarding. Fail-closed defaults (loopback-only listener, no accounts until configured); setup and security notes in the README.
Fail-closed microsandbox microVM provider and model-facing guest tools
nono (Landlock/Seatbelt) backend for the DeepSeek Harness sandbox seam with a vendored fail-closed executor
AI approval answerer using the unified ctx.llm route with fail-closed local policy checks
Security for DeepSeek Harness in two layers: source-backed pre-install vetting plus fail-closed runtime guardrails and HMAC-chained audit logs. Zero runtime dependencies.
DeepSeek Harness 工作区管理工具集:查看、创建注册、重命名、删除工作区记录(纯注册,不触碰磁盘目录);破坏性操作(删除注册、改注册路径)走用户审批 fail-closed。
DSH microsandbox bundle: Linux microVM shell executor and ctx.sandbox provider (msb run) with workdir/env preservation, fail-closed probing, and shell-free argv construction
One-click control that closes a session's persistent bash terminal (dual-face: /exit-bash command + session-header button) so the sandbox mode can be switched
Fail-closed DSH compatibility guard for redundant GPT/Codex sandbox escalation arguments
Fail-closed MCP tool baseline and runtime approval security for DeepSeek Harness.
A fail-closed, auditable approval policy plugin for DeepSeek Harness
Data-loss-prevention plugin for DeepSeek Harness: a non-configurable tool guard floor, tool-result redaction, and fail-closed telemetry redaction
Fail-closed secret-like payload guard for DeepSeek Harness tool calls.
DSH memory plugin gated by the TypeSafe Jev decision model: mem_* tools whose every read/write is a typed judgement (choice/noul) — write gate, recall gate and a fail-closed injection gate with budget, audit log and restore/merge.
Local, zero-network, fail-closed secret preflight for DeepSeek Harness model requests.
Codex-style auto-approval for DeepSeek Harness. An independent reviewer decides allow/deny, fail-closed, with a rationale for every decision. Engine: an LLM route, or TypeSafe's Jev (`reviewer.engine`). · DSH 插件:独立复核器裁决,引擎可选 LLM 路由或 Jev。