Only the current release line pinned to DeepSeek Harness 0.1.5-rc.1 is supported. DSH is a Developer Preview and may introduce breaking changes.

Run the DSH Web surface on loopback and use an authenticated SSH tunnel. Do not bind it directly to a public interface. These plugins reduce uncertainty around effects and workspace changes; they are not a network security boundary or a multi-tenant isolation system.

Please report suspected vulnerabilities through GitHub's private security advisory flow for this repository. Do not include credentials, raw journal contents, private workspace data, or public proof-of-concept exploitation in an issue.

• An interrupted or duplicate effect key is not automatically replayed.
• A child workspace is not merged without an explicit call from its owning parent Agent.
• Parent drift, path escape, symlinks, and special files reject acceptance.
• Raw request/result bodies and raw exception messages are not persisted by the effect ledger.

The project has not yet completed adversarial multi-process stress, kill-at-every-state fault injection, large-tree performance characterization, or a public security audit.