dsh-risk-guard
DeepSeek Harness 的零中断审计与熔断拦截。
插件会安装到这里；不确定时保持 web。
npx -y @deepseek-ai/dsh plugin --profile web add dsh-risk-guard@0.2.0DeepSeek Harness 的零中断智能体审计与熔断拦截插件。
Risk Guard 以 dsh-risk-guard 发布，当前版本为 0.2.0。Plugin Hub 会校验它的 manifest，并保存精确安装来源，便于复现安装结果。
Zero-interruption audit + fuse blocking for DeepSeek Harness (dsh).
/risk-guard answers "what did my agent actually do?",
with scores, tags, reasons and redacted details for the current session,
one turn, or all history.All data stays on your machine under <DSH_HOME>/risk-guard/. No network
calls, no telemetry.
Requires an existing DeepSeek Harness installation.
dsh plugin --profile web add dsh-risk-guard
Restart the Web UI, then use /risk-guard in any session.
npm install dsh-risk-guard
or with pnpm:
pnpm add dsh-risk-guard
Then register the plugin in your profile's cordis.patch.yml:
- insert:
- id: risk-guard
name: 'dsh-risk-guard'
git clone https://github.com/shuxue6662-a11y/dsh-risk-guard.git
cd dsh-risk-guard
pnpm install
pnpm build
dsh plugin --profile web add .
/risk-guard operation bill for the current session
/risk-guard --turn only the last turn
/risk-guard --all summary + bills for every recorded session
/risk-guard --since=2026-08-01
only records from this date (with any other flag)
/risk-guard --json machine-readable output
The bill includes the time range, call/turn counts, high-risk and fuse-block counts, max/total scores, tag distribution, a risky-calls table and every fuse denial.
All options are optional; defaults are shown below.
| Option | Default | Meaning |
|---|---|---|
fuseEnabled | true | master switch for fuse blocking |
maxFileSizeMb | 50 | gzip-archive the monthly JSONL above this size |
retentionDays | 30 | delete gzip archives older than this many days |
cumulativeRiskWindowMs | 600000 | rolling window for the repeat-tag risk bonus |
highRiskThreshold | 60 | score floor for the consecutive-high-risk bonus |
workspaceRoot | unset | detect writes outside the workspace |
homeDir | OS home | home used by path rules and ~ expansion |
dshHome | ~/.dsh or $DSH_HOME | audit store at <dshHome>/risk-guard |
protectedBranches | ['main', 'master'] | force-push to these branches is blocked |
protectedRemotes | [] | force-push to these remotes is blocked |
credentialFileNames | common list | .env, credentials, id_rsa, … |
Example:
- insert:
- id: risk-guard
name: 'dsh-risk-guard'
config:
fuseEnabled: true
workspaceRoot: 'C:/projects/my-app'
protectedBranches: ['main', 'master']
rm -rf / del / Remove-Item deleting the filesystem root, the home
directory itself, $HOME/*, DSH_HOME, or a credential file;dd of=/dev/sdX, mkfs*, wipefs, diskpart,
shred /dev/…, format C:);git push --force / -f targeting main/master or a configured protected
remote (feature branches are not blocked);curl, wget, nc, scp, ssh, …) referencing a
credential file.Everything else runs untouched. Set fuseEnabled: false to disable the fuse
while keeping the audit recorder active.
<DSH_HOME>/risk-guard/<yyyy-mm>.jsonl through a
serialized write queue; oversized month files are gzip-archived.sk- keys, private-key blocks,
Bearer tokens, .env lines, password assignments) are redacted before
storage; only a digest of the redacted value is kept.| Environment | Status |
|---|---|
dsh 0.1.0-rc.6 (npm next) | tested |
web profile | tested |
headless profile | works (command is conditionally registered) |
@deepseek-ai/* differ. Reinstall the plugin in the profile and run
pnpm dedupe.fuseEnabled: false.See CONTRIBUTING.md and SECURITY.md.
MIT