DeepSeek Harness automatic preset

Key features

• Static rules + LLM classifierread-only/session/workspace general operations are directly released
• LOWIf not sent for review, it will be released silently
• /approval-mode View the current session review mode
• Only terminatorThere is only one adjudicator (prepend + global) for the same approval to avoid double pop-up windows/double writing/audit breaks.
• Danger, external writing, credential leakage, protected paths are directly rejected