What it may solve
Declarative tool fencing for DeepSeek Harness: allow/deny/ask rules over tool invocations with argument globs, wired to the native approval flow, with an audit trail.
Imported third-party catalog description; not a Registry verification conclusion.