allowlist 4
Runtime security gate for DeepSeek Harness: egress host allowlist, secret redaction in tool results, and an append-only audit log
dsh plugin add dsh-egress-guardModel authorization gate: subagent model/provider pulls must be in the user-controlled allowlist. 模型授权闸:子代理拉模型必须 ∈ 用户 allowlist
dsh plugin add dsh-miopiik-model-authFine grained per tool permission rules for DeepSeek Harness (DSH). deny/ask lists in Claude Code rule syntax, enforced at the tools/pre-execute gate. Works standalone.
dsh plugin add dsh-movein-permissionsEgress policy for DeepSeek Harness: a host allowlist on web_fetch and web_search enforced at connect time, audit-mode by default, with OCSF Network Activity records
dsh plugin add dsh-netguard