Approval-first edit/write for DeepSeek Harness: shadow tools ask the user BEFORE a mutation the standing sandbox policy would deny, so the model never has to repeat a tool call with sandbox_permissions. In-policy writes stay silent, out-of-policy targets get an approval card on the first call.
作者： joao-paulo-santos · 安全与权限 · 目录快照： 2026-09-05Approval-first edit/write for DeepSeek Harness: shadow tools ask the user BEFORE a mutation the standing sandbox policy would deny, so the model never has to repeat a tool call with sandbox_permissions. In-policy writes stay silent, out-of-policy targets get an approval card on the first call.
第三方目录导入描述，不是 Registry 验证结论。joao-paulo-santos/dsh-approval-first
0 stars · — downloads
信号由来源目录提供，不代表质量或安全。 2026-09-05尚无精确版本测试。
尚无 Registry 安全结论。
尚无功能冒烟证据。
尚未解析插件权限。
版本与完整性尚未解析。
在 DSH 对话中描述你的任务，并提到 dsh-approval-first. 插件管理器可通过 Registry 搜索到此候选，再在本地检查实际来源与版本。
github:joao-paulo-santos/dsh-approval-first未解析精确版本