Approval-first edit/write for DeepSeek Harness: shadow tools ask the user BEFORE a mutation the standing sandbox policy would deny, so the model never has to repeat a tool call with sandbox_permissions. In-policy writes stay silent, out-of-policy targets get an approval card on the first call.
Author: joao-paulo-santos · Security & Permissions · Catalog snapshot: 2026-09-05Approval-first edit/write for DeepSeek Harness: shadow tools ask the user BEFORE a mutation the standing sandbox policy would deny, so the model never has to repeat a tool call with sandbox_permissions. In-policy writes stay silent, out-of-policy targets get an approval card on the first call.
Imported third-party catalog description; not a Registry verification conclusion.joao-paulo-santos/dsh-approval-first
0 stars · — downloads
Signals were provided by the source catalog and do not imply quality or safety. 2026-09-05No exact-version test is available.
No Registry security conclusion is available.
No functional smoke evidence is available.
Plugin permissions have not been resolved.
Version and integrity have not been resolved.
Describe your task in a DSH conversation and mention dsh-approval-first. The plugin manager can find this candidate through Registry, then inspect its actual source and version locally.
github:joao-paulo-santos/dsh-approval-firstExact version not resolved