ocsf 2
Egress policy for DeepSeek Harness: a host allowlist on web_fetch and web_search enforced at connect time, audit-mode by default, with OCSF Network Activity records
dsh plugin add dsh-netguardRead-side SIEM forwarder for DeepSeek Harness: normalises session activity to OCSF and ships it
dsh plugin add dsh-ocsf-forwarder