ocsf 2
Read-side SIEM forwarder for DeepSeek Harness: normalises session activity to OCSF and ships it
dsh plugin add dsh-ocsf-forwarderEgress policy for DeepSeek Harness: a host allowlist on web_fetch and web_search enforced at connect time, audit-mode by default, with OCSF Network Activity records
dsh plugin add dsh-netguard