deepseekplugins

DeepSeek Harness plugin

dsh-instruction-audit

Privacy-minimal provenance receipts for DeepSeek Harness workspace instructions

Development & Runtime
Jump to install

Source facts

Repository
1052326311/dsh-instruction-audit
Latest update
Aug 14, 2026
Category
Development & Runtime
GitHub stars
1
Format
plugin
Catalog evidence
Upstream dsh.bundle evidence
Evidence path
package.json#dsh.bundle
Checked against
0.1.0-rc.8
Upstream check date
2026-08-20

This evidence comes from the upstream catalog. This site has not installed, run, or security-reviewed the plugin.

Install

Start with a prompt that asks an agent to review the GitHub repository and source. Switch to the command if you want to install it yourself.

Copy this prompt into DSH, Codex, or another agent and ask it to review the GitHub repository and source first.

Do not install or run any commands yet. Read this plugin's GitHub repository, README, and relevant source code. Then answer the questions below clearly and directly so I can decide whether it fits my needs:

1. What is this plugin, and what problem does it solve?
2. Who is it for, and what are its typical use cases?
3. How is it used after installation? Include one minimal example.
4. What known limitations or privacy, security, compatibility, or maintenance risks does it have?
5. Give a clear recommendation: recommend, conditionally recommend, or do not recommend, with reasons.

Distinguish statements documented by the repository, inferences from source code, and unknowns. If evidence is insufficient, say so explicitly. Do not guess or simply repeat the README.

GitHub: https://github.com/1052326311/dsh-instruction-audit
Plugin: dsh-instruction-audit
Author: 1052326311

Check the source files

Read the README and other files from this plugin directory before installing.

File explorer3 files
README.mdSource · read only

dsh-instruction-audit

dsh-instruction-audit records privacy-minimal receipts for the workspace instruction files that DeepSeek Harness actually placed into a session. It is an independent community bundle, not an official DeepSeek AI package.

It observes the durable agent-instructions message source already emitted by the Harness. Each receipt contains the session id, event sequence/time, baseline flag, logical scope, display path, action, and producer-owned content digest. It never reads instruction files, stores instruction text, modifies a workspace, or changes prompt assembly.

The published bundle has no runtime npm dependencies. It uses the existing Cordis context supplied by the active Harness process and only imports that type while building.

This is useful when auditing which AGENTS.md/CLAUDE.md files actually affected a session, especially after a nested-workspace boundary or instruction budget incident.

Install

Build a portable tarball first:

pnpm install
pnpm pack
dsh plugin --profile web add ./dsh-instruction-audit-0.1.1.tgz

The bundle writes receipts under $DSH_HOME/instruction-audit/v1/. File names are SHA-256 hashes of session ids; the id remains inside each JSONL receipt. Override the location without changing Harness state:

- id: instruction-audit
  config:
    receiptRoot: /absolute/path/to/receipts

Read one session's receipts:

dsh-instruction-audit --session session-123

Evidence Boundary

--dump-config proves only that the layer composes. A release must also be tested by installing the packed tarball into a temporary DSH_HOME, booting a real loopback Web profile, emitting a real durable user/message event with the Harness agent-instructions source, observing one receipt, and confirming that its JSONL contains no instruction body.

The plugin deliberately does not infer instructions from the filesystem. A receipt proves only the structured source the Harness logged; it does not prove that a model followed the instructions or that a digest is a security boundary.

Verification

Version 0.1.1 was verified against DeepSeek Harness source revision 47f943859bef60e4160492346772ded9b24f765a by:

1. Building the Harness production libraries and Web frontend. 2. Packing this repository, then installing the tarball with dsh plugin --profile web add into a fresh DSH_HOME. 3. Booting the actual loopback Web profile. 4. Appending an agent-instructions user message through the real SessionStore publication path, then reading its receipt with this package's installed CLI.

The proof used a distinct instruction-text sentinel and confirmed it was not present in the persisted JSONL. Unit coverage also checks malformed events, replace/remove transitions, and same-session write order.

License

MIT

Back to searchOpen GitHub repository

More related plugins

View category