DeepSeek Harness automatic sandbox
DeepSeek Harness plugin for rule-gated automatic sandbox approval with optional LLM review, one-time grants, fixed high-risk checks, and native human fallback.
Project overview
dsh-approve-for-me — Automatic sandbox approval for DeepSeek Harness Rules set the boundary. The current session model reviews candidates. Anything uncertain goes back to you.
dsh-approve-for-me is a DeepSeek Harness plugin for rule-gated automatic approval of narrowly allowlisted Shell and PowerShell sandbox escalations. It applies fixed high-risk checks, an optional tool-free LLM reviewer, and native human fallback. Every successful decision grants one allowed-once approval, never permanent access. It is validated against DeepSeek Harness 0.1.0-rc.6; newer Harness releases will be tracked after validation.
Rules determine which requests are eligible for automatic review. The LLM reviewer can narrow that set but cannot bypass rules or fixed high-risk checks. A successful decision grants only one allowed-once, never permanent access. Quick use