Approval-first edit/write for DeepSeek Harness: shadow tools ask the user BEFORE a mutation the standing sandbox policy would deny, so the model never has to repeat a tool call with sandbox_permissions. In-policy writes stay silent, out-of-policy targets get an approval card on the first call.
What it doesAI
Approval-first edit/write for DeepSeek Harness, prompting users before out-of-policy file mutations.
- Prompts before out-of-policy writes
- In-policy writes happen silently
- Approval card on first denied call
AI-generated from the repo README — for reference only.
Installation
dsh plugin --profile web add github:joao-paulo-santos/dsh-approval-firstInstall method: GitHub · no verification record (L1-L5)
Compatibility
| DSH Version | Status |
|---|---|
| not stated | no verification record |
Requirements
- • Node.js: not stated
- • DSH: not stated
- • External credentials: none detected
Security Report
Automated static scan, not manual review.
Vet static analysis found no suspicious behavior — verdict is clean.
0.5.0dsh manifest1d6e2efbe0502026-08-250a80569ecbdbclean · gitscore 100Vet is an AST static scan (npm artifact or git source).
`[](https://www.dsh.so/artifact/dsh-approval-first/)`Disclaimer: automated static analysis, not a security guarantee. Always review what you install.
Risk details
Activity
Last commit 2026-08-25 · activity: Active
• Repo created: 2026-08-25
• Stars: ★ 0 · Forks: 0
• Health: Active — committed within last 30 days