dsh-build-hermeticity-proof
离线的内容寻址证明，证明已记录的构建过程始终未超出声明的输入和输出范围
插件会安装到这里；不确定时保持 web。
npx -y @deepseek-ai/dsh plugin --profile web add github:dongsheng123132/dsh-build-hermeticity-proof#7d8b48830d029d933458a47ceeb4248924fed83eBuild Hermeticity Proof 以 dsh-build-hermeticity-proof 发布，当前版本为 0.1.1。Plugin Hub 会校验它的 manifest，并保存精确安装来源，便于复现安装结果。
An offline, deterministic evidence layer for DeepSeek Harness supply chains. It verifies whether an explicit, hash-only build access receipt stayed inside its declared file, environment, network, clock, randomness and output closure.
It does not execute a build, does not enforce a sandbox, authenticate the receipt, or prove that unrecorded accesses could not occur. It also does not prove reproducibility. A hermetic verdict means only that the supplied receipt is internally complete and policy-conformant.
dsh-reproducible-build-proof compares independently operated rebuild receipts for byte-identical specified outputs.dsh-attestation-proof verifies DSSE/in-toto signatures, subjects and signer thresholds.Observed undeclared access fails. A denied undeclared attempt is retained as containment evidence but does not breach the closure. Observed network access always fails under the v1 deny-only network policy. Declared inputs and outputs must all appear in the receipt; the source revision, invocation, clock value, random seed and allowed environment values are hash-bound.
dsh plugin add github:dongsheng123132/dsh-build-hermeticity-proof#COMMIT
The bundle exposes dsh_build_hermeticity_inspect and dsh_build_hermeticity_verify from one headless core. The independent MCP stdio server exposes build_hermeticity_inspect and build_hermeticity_verify. The CLI accepts inspect or verify plus an explicit JSON path.
See examples/hermetic.json. Reports contain only hashes, counts, booleans, classifications and verdicts. Secret-shaped material, raw logs and body/content fields are rejected. The DSH verify tool reads a workspace-relative non-symlink manifest, writes only to an explicit workspace-relative artifactDir, creates deterministic content-addressed output exclusively, and verifies it by read-back.
npm test
npm run check
npm run smoke:plugin
npm run smoke:mcp
python C:/Users/YOU/.codex/skills/.system/plugin-creator/scripts/validate_plugin.py .
Node.js 22 or newer is required. The verifier has no runtime dependency, spawns no process and makes no network request.