dsh-vulnerability-remediation-proof
针对所提供漏洞修复闭包的离线内容寻址证明
插件会安装到这里；不确定时保持 web。
npx -y @deepseek-ai/dsh plugin --profile web add github:dongsheng123132/dsh-vulnerability-remediation-proof#e0d12c8db270584431064dc5e60e4b7ac0762f7fVulnerability Remediation Proof 以 dsh-vulnerability-remediation-proof 发布，当前版本为 0.1.1。Plugin Hub 会校验它的 manifest，并保存精确安装来源，便于复现安装结果。
Offline, deterministic evidence that a supplied vulnerability-remediation campaign covered every declared asset, deployed one fixed artifact, rescanned after deployment, met its remediation deadline and reached fresh zero-residual closure. Inputs and reports contain hashes and bounded public metadata only—never hostnames, addresses, scan bodies or secrets.
This is deliberately not a scanner or patch manager. DeepSec scans DSH code and upstream-radar monitors dependency vulnerabilities; operational platforms deploy patches. This plugin performs no discovery, scanning, installation, mitigation or live-system query. It only recomputes a redacted settlement verdict from explicit receipts.
npm test
npm run check
node bin/dsh-vulnerability-remediation-proof.mjs verify examples/closed.json
DSH tools: dsh_vulnerability_remediation_inspect and dsh_vulnerability_remediation_verify. MCP exposes equivalent proof-only inline tools. Reports explicitly retain authenticatesReceipts: false, provesAssetSetExhaustive: false, and provesAbsenceOfOtherVulnerabilities: false.
References: NIST SP 800-40 Rev. 4 and NIST SP 1800-31.
MIT licensed.