dsh-credential-retirement-proof
所提供的凭证退役闭包的离线内容寻址证明
插件会安装到这里；不确定时保持 web。
npx -y @deepseek-ai/dsh plugin --profile web add github:dongsheng123132/dsh-credential-retirement-proof#81842ef5dca15ae9678dfaec797381953b196332Credential Retirement Proof 以 dsh-credential-retirement-proof 发布，当前版本为 0.1.1。Plugin Hub 会校验它的 manifest，并保存精确安装来源，便于复现安装结果。
Offline, deterministic evidence that a supplied credential rotation activated a new credential for every declared consumer, rejected the old credential, stayed inside its overlap window and reached a fresh zero-residual closure. Inputs and reports contain hashes and bounded public metadata only—never secrets.
This is deliberately not another key rotator. Existing DSH plugins such as dsh-key-rotation and dsh-llm-key-rotation perform pool switching and failover. This plugin performs no issuance, distribution, switching, revocation, probing or live-system query. It only recomputes a redacted settlement verdict from explicit receipts.
npm test
npm run check
node bin/dsh-credential-retirement-proof.mjs verify examples/settled.json
DSH tools: dsh_credential_retirement_inspect and dsh_credential_retirement_verify. MCP exposes equivalent proof-only inline tools. Reports explicitly retain authenticatesReceipts: false, provesConsumerSetExhaustive: false, and provesAbsenceOfUndeclaredBindings: false.
References: NIST SP 800-57 Part 1 Rev. 5 and NIST SP 800-63B revocation/termination guidance.
MIT licensed.