Agentic Control Plane for DeepSeek Harness

Key features

• tools/pre-execute — the policy decision.
• Interactive sessions fail open, loudly.
• dsh's packages/acp is Zed's Agent Client Protocol — an unrelated project that shares an acronym.
• What ACP can see and control in dsh — the living controls reference
• allow lets the call through, deny blocks it with the reason in the trajectory, ask hands off to dsh's own approval flow.