What it may solve
The auto permission tier for DeepSeek Harness: workspace-write requests run directly, sandbox escalations (danger-full-access) are judged by a separate classifier model.
Imported third-party catalog description; not a Registry verification conclusion.