dsh-principal-binding-proof
跨 DSH 执行面的伪名权限绑定的离线内容寻址证明
插件会安装到这里；不确定时保持 web。
npx -y @deepseek-ai/dsh plugin --profile web add github:dongsheng123132/dsh-principal-binding-proof#a76fd5510f27d4aada5b91023cc4051e88d5b078Principal Binding Proof 以 dsh-principal-binding-proof 发布，当前版本为 0.1.1。Plugin Hub 会校验它的 manifest，并保存精确安装来源，便于复现安装结果。
Offline, content-addressed evidence that one pseudonymous authority and tenant remain consistently bound across a DSH execution chain: principal → session → agent → tool call → runtime → artifact.
It validates explicit recorded hashes, revision, key epoch, evidence freshness, issuer allowlists, validity windows, revocation, adjacency and a unique acyclic chain. It detects authority swaps, cross-tenant confusion, stale identities, broken or mis-typed bindings, unauthorized issuers and terminal artifact mismatches.
This is not authentication, authorization, signature verification, access control or a remote transport. It grants no authority, reads no accounts, credentials, prompts or business payloads, and executes no commands.
dsh-decision-effect-proof reconciles authorization decisions with effects.dsh-attestation-proof verifies signed DSSE/in-toto statements.dsh-lineage tracks object and action provenance.See examples/bound.json.
npm test
npm run check
node bin/dsh-principal-binding-proof.mjs verify examples/bound.json
dsh plugin --profile proof add .
DSH tools are dsh_principal_binding_inspect and dsh_principal_binding_verify. MCP exposes proof-only inline equivalents. Workspace verification accepts only relative, non-symlink paths and writes a deterministic content-addressed report beneath an explicit artifactDir, followed by SHA-256 read-back verification.
MIT licensed. See SECURITY.md.