dsh-attestation-proof
DeepSeek Harness 发布版本的离线 DSSE/in-toto 证明材料
插件会安装到这里；不确定时保持 web。
npx -y @deepseek-ai/dsh plugin --profile web add github:dongsheng123132/dsh-attestation-proof#50fc87738318e8d37dfe54727c815b1d34804213Attestation Proof 以 dsh-attestation-proof 发布，当前版本为 0.1.1。Plugin Hub 会校验它的 manifest，并保存精确安装来源，便于复现安装结果。
Offline, deterministic release-attestation evidence for DeepSeek Harness. It verifies an explicit manifest against a workspace-local subject, pinned public keys, and DSSE-wrapped in-toto statements, then emits a content-addressed JSON verdict.
This fills a narrower gap than dsh-release-proof (download byte/version agreement), dsh-profile-lock-proof (installed profile contents), or dsh-audit-bundle (multi-producer evidence indexing). It does not fetch transparency logs, discover trust roots, claim full Sigstore/SLSA conformance, execute build commands, or infer publisher identity.
The report never contains the signed payload, subject bytes, public-key PEM, secrets, or arbitrary command output. Verification is offline. All filesystem inputs and the artifact directory must stay inside an explicit workspace; symlinks, path traversal, oversized inputs, lifecycle scripts, and overwrites are rejected.
dsh-attestation-proof inspect --workspace . --manifest proof.json
dsh-attestation-proof verify --workspace . --manifest proof.json --artifactDir artifacts
verify exits 0 for verified, 2 for a cryptographic/policy rejection, and 1 for invalid or unsafe input. Stdout is one JSON result; errors go to stderr.
The DSH bundle registers dsh_attestation_proof_inspect and dsh_attestation_proof_verify from one host-neutral core. The independent stdio MCP server exposes proof-only attestation_proof_inspect and attestation_proof_verify; its inline mode accepts bounded public evidence and performs no filesystem writes.
Schema version 1 requires subject {id,path,sha256}, trust {threshold,keys[]}, attestations[], and optional policy {minVerifiedAttestations,allowedPredicateTypes,requiredClaims[]}. Each key and envelope file carries its own SHA-256 pin. A required claim is {pointer,sha256}, where the hash is over canonical JSON for the selected value.
npm test
npm run check
npm run smoke:plugin
npm run smoke:mcp
python C:/Users/ZhuanZ/.codex/skills/.system/plugin-creator/scripts/validate_plugin.py .
MIT licensed. Security reports: SECURITY.md.