What it may solve
CC-style auto-approval for DeepSeek Harness: deterministic deny/allow rules plus a two-stage allow/reject classifier with a circuit breaker and denial guidance.
Imported third-party catalog description; not a Registry verification conclusion.