judge 2

Shared zero-runtime-dependency toolkit for PerryLink DSH plugins: a pluggable Provider registry seam, fail-closed approval and adaptive session-event gates, mechanical verify scripts, shared sanitize/pricing/judge modules, and a new-plugin skeleton.

DSH plugin: dual-model orchestration for code tasks — a high-capability judge writes Task Contracts and reviews evidence, a cheap worker implements in a git worktree, and the plugin verifies with real commands.