Dsh Riskproof

Key features

• Know where tool inputs came from.
• Carry security labels — UNTRUSTED_WEB, CUSTOMER_DATA, PII, SECRET, … — across tool calls, additively.
• Identify the EXTERNAL_INGESTION → PRIVATE_ACCESS → EXTERNAL_ACTION pattern that single-tool checks miss.
• Block or ask before the side effect runs, through the native tools/pre-execute gate.
• RiskProof maps arguments back to the tool results that produced them.