DeepSeek Harness Plugin

wdj20050927/dsh-quality-guard

Category Workflow & Automation Added 2026-11-05

Second-model gate on the assistant turn, installed in two parts: copy engine/ into ~/.dsh/plugins/ and mount it by absolute path in the profile patch (the bundle itself only installs the settings panel), then switch off the default dry-run mode that only logs verdicts. Once active, a separate judge call scores the draft against the numbered criteria (0-10 each); any criterion under 6 fails the turn and sends it back for a rewrite, up to 3 rounds by default. The web panel edits criteria and thresholds, and every verdict is appended to an audit log.

Install

# from GitHub (first run asks for allowBuilds approval — follow the hint, retry)

dsh plugin --profile web add github:wdj20050927/dsh-quality-guard

Any plugin you install runs third-party code with your own permissions — it can read your files, use your credentials, and reach the network, and tool approvals don’t sandbox it. GitHub-sourced plugins also run build scripts at install time — pnpm blocks those until you allow them, so an install can stop with ERR_PNPM_GIT_DEP_PREPARE_NOT_ALLOWED or ERR_PNPM_IGNORED_BUILDS; dsh prints the exact key to add under allowBuilds in your profile’s pnpm-workspace.yaml, and the install works on the next run. Allowing a build is a trust decision: only install sources you trust, and pin a commit (github:owner/repo#sha).

Links

More in this category

View the whole category →

Community comments

Comments are public GitHub Discussions. Loading them connects to GitHub and Giscus; a GitHub account is required to post.