dsh-approval-first
Approval First
Approval-first edit/write for DeepSeek Harness: shadow tools ask the user BEFORE a mutation the standing sandbox policy would deny, so the model never has to repeat a tool call with sandbox_permissions. In-policy writes stay silent, out-of-policy targets get an approval card on the first call. Regis
The plugin will be installed here. Keep web if you are unsure.
npx -y @deepseek-ai/dsh plugin --profile web add github:joao-paulo-santos/dsh-approval-first#77acb200378a9231dbbf82fc1c103aa24e2df3e0Description
Approval-first edit/write for DeepSeek Harness: shadow tools ask the user BEFORE a mutation the standing sandbox policy would deny, so the model never has to repeat a tool call with sandbox_permissions. In-policy writes stay silent, out-of-policy targets get an approval card on the first call. Registration follows the session's current standing mode live; a boot-time drift tripwire refuses to activate when the shipped edit/write definitions no longer match the frozen copies.
Compatibility and provenance
Approval First is published as dsh-approval-first and currently resolves to version 0.6.1. The Hub verifies its manifest and preserves the exact installation source for reproducible installs.
- DSH compatibility
- *
- Runtime surfaces
- any
- Release source
- github
- Registry updated