dsh-freeze
DeepSeek Harness 的封闭式组合锁：为配置文件的插件集合、锁定文件和补丁层生成指纹；在组合发生漂移时启动的会话会明确指出这一点——将 vendor-skills --frozen 理念应用于整个 agent
插件会安装到这里；不确定时保持 web。
npx -y @deepseek-ai/dsh plugin --profile web add github:zhengqiuyang/dsh-freeze#859780ed6c3f30478639a4448798a1ca242ab206Freeze 以 dsh-freeze 发布，当前版本为 0.1.0。Plugin Hub 会校验它的 manifest，并保存精确安装来源，便于复现安装结果。
点击下方 Badge 复制 Markdown，粘贴到 README 即可。
验证 package.json 声明的 GitHub 仓库，即可管理这个公开页面。认领后，Hub 会优先安排当前版本的安全扫描，并在通过后公开展示结果。
认领这个 Plugin →Hermetic composition lock for DeepSeek Harness (dsh).
"Today's agent composition is byte-identical to the one you reviewed."
Fingerprints the booted profile — installed dependencies (name-sorted), the
ordered bundle composition, the pnpm lockfile hash, the user patch layer —
baselines it, and compares on every boot. A session running on a drifted
composition says so loudly; strict: true fails the boot entirely (the
--frozen posture for CI). Zero LLM calls in the trust path.
Family: ... mcp-test (what agents can call) · prompt-drift (what they are told) · freeze (what exactly they are running).
The supply-chain lane has seven install-time scanners and one read-only
plugin ledger (dsh-harbor) — all answer "is this package ok to install?"
Nobody answers "is the composition I'm running today the one that was
audited?" Spike-verified: dsh --dump-config is byte-stable across runs,
and profile files (package.json / pnpm-lock.yaml / cordis.patch.yml) are the
complete composition truth — a deterministic fingerprint is sound.
| field | meaning |
|---|---|
dependencies | a package was added/removed/retargeted |
bundles | the ordered composition changed |
pnpm-lock | resolved versions moved (upgrade!) |
cordis.patch.yml | the user layer changed |
dsh plugin --profile default add github:zhengqiuyang/dsh-freeze
Prebuilt lib/ ships in the repo — git installs need no build step and no
allowBuilds authorization.
- id: dsh-freeze
name: dsh-freeze
config:
baselinePath: .dsh-freeze/baseline.json
strict: false # true: drift fails the boot (CI posture)
profile: "" # '' auto-detects from argv (--profile, else 'web')
Note: the baseline is written into the working directory of the session by default; for CI, point it somewhere durable and commit it.
npm install && npm test
If dsh ships first-party profile pinning (--frozen boot flag or
equivalent), this freezes at its last working version with a postmortem
here.