@tappass/dsh-governance
面向智能体 AI 的授权层，作为 DeepSeek Harness 插件运行。通过 TapPass /v1/govern 策略决策点，依据您的业务规则管理每次工具调用。
插件会安装到这里；不确定时保持 web。
npx -y @deepseek-ai/dsh plugin --profile web add @tappass/dsh-governance@0.2.1Governance 以 @tappass/dsh-governance 发布，当前版本为 0.2.1。Plugin Hub 会校验它的 manifest，并保存精确安装来源，便于复现安装结果。
The authority layer for agentic AI, as a DeepSeek Harness plugin.
Everything in DeepSeek Harness is a plugin. This is the one that decides what your agents are allowed to do.
Guardrails and safety classifiers ask "is this output harmful?" That is a property of the model. TapPass asks a different question: "is this agent allowed to do this, under our rules, right now?" That is a property of your business, and no model level tool can answer it, because the answer lives in your organisation, not in the weights.
This plugin intercepts every tool call at the harness's tools/pre-execute
seam, sends it to the TapPass policy decision point (POST /v1/govern), and
allows, denies, or escalates it for human approval.
# create a profile if you do not have one, then add the plugin
dsh plugin --profile default add @tappass/dsh-governance
# point it at your TapPass workspace
export TAPPASS_API_KEY="tp_dev_..." # a TapPass developer key
# verify the layer without booting, then run
dsh --profile default --dump-config
dsh --profile default
Get a developer key from your TapPass dashboard (Settings, Developer keys) or
POST /api/agents/{agent}/developer-keys. The key is bound to one agent and one
org; TapPass records the audit trail against it.
Every tool call is governed once it is installed. Configuration is optional; the defaults are safe.
| Key | Default | Meaning |
|---|---|---|
baseURL | https://app.tappass.ai | TapPass API base. The plugin POSTs to ${baseURL}/v1/govern. |
apiKeyEnv | TAPPASS_API_KEY | Env var holding your tp_dev_ key. A reference, not the secret. |
mode | observe | observe: send and record every call, block nothing. enforce: honor verdicts. |
onError | deny | In enforce, when TapPass is unreachable: deny (fail closed) or allow (fail open). |
timeoutMs | 4000 | Hard timeout per verdict call. A slow PDP never wedges the agent loop. |
agentId | harness agent id | Override the agent id sent to TapPass. |
orgId | from the key | Override the org id; normally stamped from the developer key. |
Set them in your profile's patch, for example to enforce:
# $DSH_HOME/profiles/default/cordis.patch.yml
- tappass-governance:
config:
mode: enforce
TapPass outcome | dsh PreToolDecision | Effect |
|---|---|---|
allow | next() | the tool runs |
block | { kind: 'deny', reason } | the model gets an error result with the reason |
needs_approval | { kind: 'ask', reason } | routed to the harness approval flow for a human |
In observe mode every call returns next(), but a would-be block or approval
is still recorded server side and logged locally, so you can size your policy
against real traffic before enforcing.
The plugin sends its mode with each call (enforcement.mode), so the audit
trail can show an observe-mode block distinctly from an enforced one.
tools/pre-execute by design (they are already logged and shown to the
model), so a TapPass modify verdict cannot be applied in place. This plugin
fails such a call closed in enforce mode with a clear reason rather than
silently running the unmodified request. Redaction obligations are surfaced,
not applied.needs_approval verdict maps to the
harness ask decision, which routes to whatever approval answerer your
profile mounts. With no approver configured, ask fails closed to a denial,
which is the safe default./v1/govern,
so if the harness API shifts the fix is a small shim, not a rewrite.npm install --legacy-peer-deps # dsh rc packages have skewed peer ranges
npm run build
node --test
The verdict mapping and the /v1/govern client are covered by
test/plugin.test.mjs and run against a local mock server, no TapPass instance
required.
MIT © Cogniqor BV (TapPass)