dsh-windows-settlement-proof
证明已批准的 Windows 控制平面变更已在所需各表面完成落地的离线内容寻址证据
插件会安装到这里；不确定时保持 web。
npx -y @deepseek-ai/dsh plugin --profile web add github:dongsheng123132/dsh-windows-settlement-proof#644b25fcc3aed89650e637d4464c05700d598748Windows Settlement Proof 以 dsh-windows-settlement-proof 发布，当前版本为 0.1.1。Plugin Hub 会校验它的 manifest，并保存精确安装来源，便于复现安装结果。
Offline, content-addressed evidence that an approved Windows control-plane change actually settled across every required surface. It compares explicit redacted receipts for Service Control Manager, Task Scheduler, Event Log and policy projections against a fixed hash lock, chronology, freshness and restart-epoch policy.
This is a verifier, not an operator. It never runs PowerShell, sc.exe, registry commands or arbitrary subprocesses; it never reads Windows services, task definitions, Event XML or business payloads. Reports contain only public counts, booleans and SHA-256 values.
dsh-windows-readiness-proof asks whether a Windows host satisfies prerequisites before work begins.dsh-decision-effect-proof provides generic authorization/effect linkage.It does not create a second action core and does not execute changes.
The manifest pins a redacted target identity, target revision, request, approval and desired-state hashes; an expected state hash for each required surface; bounded observation receipts; an evaluation time; freshness; and the minimum restart epoch. See examples/settled.json.
npm test
npm run check
node bin/dsh-windows-settlement-proof.mjs verify examples/settled.json
dsh plugin --profile proof add .
DSH tools:
dsh_windows_settlement_inspect: inline, read-only metadata inspection.dsh_windows_settlement_verify: verifies a workspace-relative manifest and writes one content-addressed report only beneath an explicit workspace-relative artifactDir.MCP tools expose inline inspection and verification without filesystem writes. The CLI exits 0 for settled, 1 for a valid but unsettled verdict, and 2 for invalid input or usage.
Manifest and artifact paths reject absolute paths, traversal and symlinks. Secret-shaped values and credential-named scalar fields are rejected. Artifact writes use exclusive creation, deterministic content addressing and read-back SHA-256 verification.
MIT licensed. See SECURITY.md.