DeepSeek Harness Plugin

xmutfyh/dsh-plugin-writing-guard

Stars ★ 43 Downloads (30d) 5,034 Category Tools & Capabilities Added 2026-08-15 npm dsh-plugin-writing-guard

Academic writing guard (EN/ZH bilingual): removes AI-style defensive writing, protects scientific evidence (numbers, citations, claim strength, null findings, scope) during polishing, and calibrates writing toward a target journal (Journal Profile + Journal Fit). Deterministic local regex/statistics, zero network/LLM; writing_rules / writing_audit / writing_style_profile / writing_journal_profile with auto-audit on paper writes.

Install

# from npm (prebuilt)

dsh plugin --profile web add dsh-plugin-writing-guard

# from GitHub (first run asks for allowBuilds approval — follow the hint, retry)

dsh plugin --profile web add github:xmutfyh/dsh-plugin-writing-guard

Any plugin you install runs third-party code with your own permissions — it can read your files, use your credentials, and reach the network, and tool approvals don’t sandbox it. GitHub-sourced plugins also run build scripts at install time — pnpm blocks those until you allow them, so an install can stop with ERR_PNPM_GIT_DEP_PREPARE_NOT_ALLOWED or ERR_PNPM_IGNORED_BUILDS; dsh prints the exact key to add under allowBuilds in your profile’s pnpm-workspace.yaml, and the install works on the next run. Allowing a build is a trust decision: only install sources you trust, and pin a commit (github:owner/repo#sha).

README

CI

Scientific Writing & Document Integrity Guard for AI-assisted research

Less explanation. More argument. Preserve the science.

Writing Guard combines prompt-guided scientific prose discipline with deterministic integrity checks for AI-assisted research. It protects your manuscript across five layers:

Guard Protects against Risk
STYLE Argument economy 防御性写作、过度解释、语义重复、模板腔
EVIDENCE Scientific drift 数值、单位、引用、结论被改
JOURNAL Journal mismatch scope/style/convention 不匹配
DELIVERY Context leakage prompt、notes、workflow metadata 泄漏
DOCUMENT 🆕 Document corruption Word 格式、公式、表格、OOXML 被破坏

Prompt-guided writing · Deterministic integrity core · 394 Tests

npm install dsh-plugin-writing-guard

Writing Guard does not write your paper for you. It makes AI-assisted writing safer to ship.


New in 2.0 — Argument Economy & Control-Plane Separation

Writing Guard 2.0 moves semantic style decisions before generation and keeps deterministic code focused on integrity.

  • Critique is not content — reviewer/user/guard wording is control context, not manuscript evidence.
  • Prefer CUT over REWRITE — if a sentence only prevents criticism, reassures reviewers, advertises importance, or repeats an obvious implication, delete it.
  • Do not close every semantic loop — stop after evidence + necessary interpretation; keep non-obvious statistical interpretation and reproducibility detail.
  • Style-only revisions default to same length or shorter — no explanatory inflation without new supported content.
  • Auto-audit no longer reinjects snippets or rewrite suggestions — only structured rule/action metadata is sent back to the agent.
  • New English/Chinese cues for defensive-purpose framing, semantic-closure markers, and content-free evaluation.

Example:

Avoid:  To prevent data leakage, normalization was carefully performed using only the training data.
Prefer: Normalization parameters were estimated from the training data.

The second sentence states the method fact without importing the defensive reason for mentioning it.


🛡️ Word Document Guard (introduced in 1.8)

Change what was requested. Verify what wasn't.

AI-assisted document editing introduces a subtle risk: the requested text may improve while unrelated parts of the manuscript silently change.

When you ask an AI agent to "rewrite paragraph 3 only," it may inadvertently modify:

  • equation structures
  • table borders
  • numbering
  • styles
  • section geometry
  • relationships
  • embedded media
  • OOXML package parts

Writing Guard 1.8 introduces a document-integrity layer for Word manuscripts:

Feature What it does
Safe scoped editing Only the specified range can change
Package validation Verifies DOCX/OOXML package integrity after editing
Structural fingerprinting Compares document structure before and after
Equation integrity Checks equation structure, numbering continuity, math-font drift
Scholarly table awareness Distinguishes data tables from layout/figure containers
Pre/post integrity verification Deterministic verification, not "I think it's fine"

Before / After

Without Writing Guard:

"Please improve the wording in paragraph 3."
→ AI agent modifies DOCX.
→ Result: paragraph looks better.
→ Unknown: what else changed?

With Writing Guard:

"Please improve the wording in paragraph 3."
→ Writing Guard:
   ✓ scope validated
   ✓ package valid
   ✓ equations preserved
   ✓ protected structures unchanged
   ✓ document fingerprint checked
→ Result: paragraph changed — and unintended document drift is detected.

Quick Start

# Install
dsh plugin add dsh-plugin-writing-guard

# Restart
dsh web

Natural Language Usage

Once installed, you can use natural language:

Say this Writing Guard does this
"帮我检查论文写作质量" writing_word_audit
"把表格改成三线表" writing_word_format_tables
"扫描DOCX结构" writing_word_scan
"修改第三章的XXX" writing_word_edit
"编辑后验证范围" writing_word_scope_check
"检查有没有AI味" writing_audit

Five Guards — Detailed

STYLE — Argument Economy & Prose Discipline

Guides the host model before writing, then uses deterministic cues to audit mechanical, defensive, and over-explained prose:

  • Revision residue: revised, as requested, 本轮, 审稿人要求
  • Defensive writing: concession stacking, limitation pre-emption
  • Mechanical rhetoric: 不是X而是Y, rather than abuse, triple parallelism
  • LLM high-frequency words: delve / tapestry / testament (density-based)
  • Chinese patterns and average sentence length anomalies

EVIDENCE — Scholarship + Epistemic Lock

Protects scientific facts during AI editing:

  • Numbers, percentages, p-values, confidence intervals, units
  • Citations, Figure/Table numbers, DOI
  • Causal strength: associated with cannot become caused
  • Null findings: no significant difference cannot disappear
  • Scope boundaries and evidence status

JOURNAL — Target Journal Fit

Calibrates manuscript against target journal conventions:

  • Syntax structure (sentence length, paragraph length)
  • Voice and person (passive voice, first-person usage)
  • Citations (bibliographic, figure/table references)
  • Scientific claims (claim density, causal/evidential strength)
  • Rhetorical moves (coverage, canonical order)

DELIVERY — Context Leakage Detection

Stops workflow context from leaking into final artifacts:

  • Rejected alternatives
  • Revision process residue
  • Provenance leakage
  • Defensive hedge leakage

DOCUMENT — Word Document Integrity 🆕

Safely edit Word manuscripts without breaking structure:

writing_word_scan → writing_word_edit → writing_word_scope_check

13 tools for complete document integrity:

Tool Purpose
writing_word_scan Structural scan
writing_word_edit Safe scoped editing
writing_word_audit Writing audit for .docx
writing_word_scope_check Scope integrity verification
writing_word_format_tables Three-line table formatting
writing_word_audit_equations OMML equation audit
writing_word_package_validate OOXML package validation
writing_word_fingerprint Baseline formatting fingerprint
writing_audit Text writing audit
writing_rules Writing guidelines
writing_style_profile Author style profile
writing_journal_profile Journal profile
writing_delivery_audit Delivery integrity audit

Installation

# From npm (recommended)
dsh plugin add dsh-plugin-writing-guard

# From GitHub
dsh plugin add github:xmutfyh/dsh-plugin-writing-guard

# From local source
dsh plugin add ./path/to/dsh-plugin-writing-guard

Prerequisites:

  • Node.js ≥ 18
  • Python 3.10+ with python-docx (pip install python-docx)

Architecture

Writing Guard
├── STYLE (writing_audit)
│   ├── Revision residue detection
│   ├── AI style patterns
│   └── Density-based thresholds
├── EVIDENCE (Scholarship/Epistemic Lock)
│   ├── Number/unit preservation
│   ├── Citation integrity
│   └── Claim strength conservation
├── JOURNAL (Journal Profile)
│   ├── Corpus-aware analysis
│   ├── Section-level comparison
│   └── Rhetorical move matching
├── DELIVERY (CAL Detection)
│   ├── Rejected alternative leakage
│   ├── Process residue
│   └── Baseline reality check
└── DOCUMENT (Word Guard) 🆕
    ├── Structural scanning
    ├── Safe editing
    ├── Package validation
    ├── Fingerprinting
    └── Equation audit

Design principle: Baseline manuscript > journal/template > plugin defaults.

The LLM/agent decides what should change. Deterministic Word code decides how to make that change without silently altering unrelated formatting.


Tests

npm test

394 deterministic tests covering:

  • STYLE, Scholarship Lock, Epistemic Lock
  • Claim alignment, local citation integrity
  • Journal Profile, Journal Fit
  • DELIVERY (CAL detection)
  • Word Guard (v1.8.2): OOXML validation, fingerprinting, equation audit

Security & Privacy

  • Deterministic integrity checks run locally; semantic writing decisions are handled by the host model under the Writing Guard policy.
  • The plugin only reads files being edited.
  • The plugin itself does not upload or collect manuscript content.
  • See SECURITY.md

Why Writing Guard?

Writing Guard Humanizer AI Detector
Pre-writing rules ✅ ❌ ❌
During-writing checks ✅ Usually ❌ ❌
Auto-monitor manuscript ✅ ❌ ❌
Full rewrite ❌ ✅ ❌
Explainable issues ✅ Partial Partial
Deterministic integrity checks ✅ Usually no Depends

Humanizer rewrites after writing. Writing Guard prevents during writing.


Brand

                  WRITING GUARD
                       │
       Scientific Writing & Document Integrity
                       │
 ┌─────────┬──────────┬─────────┬──────────┬──────────┐
 STYLE   EVIDENCE   JOURNAL   DELIVERY   DOCUMENT
                                            │
                               Change what was requested.
                               Verify what wasn't.

Classic slogan: Less AI. More Evidence. Better Journal Fit. Clean Delivery.

Document slogan: Change what was requested. Verify what wasn't.


CHANGELOG

See CHANGELOG.md.

License

MIT

Content from the project README on GitHub ↗

Links

More in this category

View the whole category →

Community comments

Comments are public GitHub Discussions. Loading them connects to GitHub and Giscus; a GitHub account is required to post.