agent-governance 3
DeepSeek Harness (dsh) approval answerer backed by the agent-governance sidecar — every approval/request is decided by the deny-by-default gate, L0–L4 rules and the organizational audit chain.
dsh plugin add dsh-plugin-governance-gateFail-closed per-turn step, tool-call, and provider-token budgets for DeepSeek Harness
dsh plugin add dsh-turn-budgetDeterministic Runtime Execution Governance & Security Circuit-Breaker for DSH & Multi-Agent Workstations
dsh plugin add dsh-plugin-vajraclaw