DeepSeek Harness plugin

dsh-policy-test

Deterministic regression tests for DSH policy decisions, evaluated without invoking the protected tool body.

Jump to install

Source facts

Repository
MkaliezZ/dsh-policy-test
Latest update
Aug 19, 2026
Category
Tools & Capabilities
GitHub stars
0
Format
plugin
Catalog evidence
Upstream dsh.bundle evidence
Evidence path
package.json#dsh.bundle
Checked against
0.1.0-rc.8
Upstream check date
2026-08-20

This evidence comes from the upstream catalog. This site has not installed, run, or security-reviewed the plugin.

Install

Start with a prompt that asks an agent to review the GitHub repository and source. Switch to the command if you want to install it yourself.

Copy this prompt into DSH, Codex, or another agent and ask it to review the GitHub repository and source first.

Do not install or run any commands yet. Read this plugin's GitHub repository, README, and relevant source code. Then answer the questions below clearly and directly so I can decide whether it fits my needs:

1. What is this plugin, and what problem does it solve?
2. Who is it for, and what are its typical use cases?
3. How is it used after installation? Include one minimal example.
4. What known limitations or privacy, security, compatibility, or maintenance risks does it have?
5. Give a clear recommendation: recommend, conditionally recommend, or do not recommend, with reasons.

Distinguish statements documented by the repository, inferences from source code, and unknowns. If evidence is insufficient, say so explicitly. Do not guess or simply repeat the README.

GitHub: https://github.com/MkaliezZ/dsh-policy-test
Plugin: dsh-policy-test
Author: MkaliezZ

Check the source files

Read the README and other files from this plugin directory before installing.

File explorer2 files
README.mdSource · read only

dsh-policy-test

Deterministic regression tests for DSH policy decisions.

v0.1 evaluates policy fixtures without calling the protected tool body. It is intended for AgentFuse-style and other DSH pre-dispatch policies where configuration drift can silently turn an expected BLOCK into ASK/ALLOW.

Fixture cases carry tool, args, and expected decision. The runner returns pass/fail results and never dispatches the underlying tool implementation.

AgentFuse integration (the closed loop)

The evaluator adapter plugs directly into @agentfuse/core — the engine behind the dsh-agentfuse pre-dispatch gate. Compile the same PolicyConfig the production gate compiles, and the fixture table becomes a regression lock on the production decision table: policy drift (e.g. a default silently flipped to allow) turns red instead of turning into an unexpected ALLOW.

See [examples/agentfuse/](examples/agentfuse/README.md) for the adapter, fixtures, and a drift-detection test.

Non-claims

  • no physical tool execution in test mode;
  • not a sandbox;
  • policy adapters must be supplied explicitly;
  • passing fixtures do not prove production configuration is identical unless that configuration is what the adapter evaluates.

Development

npm install
npm test

MIT