MkaliezZ/dsh-agentfuse-plugin

Name: MkaliezZ/dsh-agentfuse-plugin
Author: MkaliezZ

Plugin插件 ⭐ 2 Apache-2.0 Approval & Security审批与安全

Deterministic fail-closed tool-call authorization for DSH with evidence: allow/block/ask policy gate plus approval-chain deferral.

Project Overview项目介绍

Edited by Zhiwei Agent (zhiwei)由知微Agent(zhiwei)编辑

AgentFuse is a pre-dispatch policy boundary plugin for DeepSeek Harness that enforces deterministic, fail-closed authorization before side-effect-capable tool calls. Its core capabilities cover deny lists, approval deferral via askTools, an allow whitelist, and a blocking default, with every decision emitting tamper-evident records that include reason codes, policy IDs, and argument hashes while raw arguments never leave the host. Use it to add a hardened safety layer to AI agents that perform real actions. Caveat: the project is ALPHA and does not claim coverage for unwrapped or future DSH execution paths.

AgentFuse 是面向 DeepSeek Harness 的预派发策略边界插件，用于在工具调用前进行确定性、故障闭合的授权判定。核心能力包括：拒绝列表、审批转交（askTools）、允许白名单及失败默认阻断，所有决策均产出包含原因码、策略 ID 与参数哈希的不可篡改证据，原始参数绝不出网。适用于需要为具备副作用能力的 AI 智能体部署高安全护栏的生产场景。需注意：项目目前为 ALPHA 状态，尚未覆盖未封装的 DSH 调用路径。

View on GitHub在 GitHub 查看

Send to your DSH发给你的 DSH 安装

请帮我了解并安装插件：【dsh-agentfuse-plugin】【https://github.com/MkaliezZ/dsh-agentfuse-plugin】

Send this message to DSH in your current session. CLI install commands may not be accurate across systems — DSH will figure it out for you.把上面这条消息直接发给当前会话里的 DSH，让它帮你了解并安装。安装命令不一定准确，发给 DSH 更稳。

Or use CLI install (for developers)或使用命令行安装（适合开发者）

CLI Install命令行安装

dsh plugin --profile web add github:MkaliezZ/dsh-agentfuse-plugin

把 MkaliezZ/dsh-agentfuse-plugin 加入你的 DSH 配置（web profile）即可启用。

READMEREADME

3.4 KB · 缓存于 2026-08-23 03:42:42 · 3.4 KB

AgentFuse

Deterministic, fail-closed tool-call authorization for AI agents — with evidence. Status: ALPHA · seeking the first real (non-self) deployment

AgentFuse is a pre-dispatch policy boundary for side-effect-capable AI agent tools, ported from the DHMS AgentFuse Python project (MkaliezZ/dhms-engine).

AGENTFUSE_IS_A_DANGER_CLASSIFIER=false
AGENTFUSE_IS_A_POLICY_AND_AUTHORIZATION_BOUNDARY=true
AGENTFUSE_DECISIONS=allow|block
AGENTFUSE_DEFERRALS=ask
AGENTFUSE_FAILS_CLOSED=true

A blocked call is a completed policy decision with non-execution evidence — never a failed tool execution. Evidence carries reason codes, policy ids, and a canonical arguments hash, never raw arguments or credentials.

Packages

Package	What it is	Depends on
`packages/core` · `@dhms-agentfuse/core`	Framework-agnostic engine: decision/evidence vocabulary, deterministic policy resolution, canonical hashing	nothing
`packages/dsh-agentfuse` · `@dhms-agentfuse/dsh-agentfuse`	DeepSeek Harness guard plugin: tested `tools/pre-execute` gate, DSH config schema, durable `agentfuse/decision` session event, and host-owned approval deferral (`askTools`)	`@dhms-agentfuse/core`, DSH

The core defines the bounded policy vocabulary; the DSH package is one experimental adapter. Potential future integrations are tracked in the roadmap, but are not implemented here.

Quickstart (DeepSeek Harness)

# cordis.yml (or a cordis.patch.yml insert)
- id: agentfuse
  name: '@dhms-agentfuse/dsh-agentfuse'
  config:
    defaultAction: block      # fail-closed fall-through
    denyTools: []             # deterministic block, always wins
    askTools: []              # defer to the DSH human-approval chain
    allowTools: []            # non-empty = only these names may run
    logDecisions: false       # durable evidence; needs in-repo catalog

See the adapter README for the policy order, the approval integration, and the install paths (bundle + PR).

Cross-adapter conformance

The DSH adapter consumes the provider-neutral DHMS AgentFuse v3.6.2 fixture snapshot with source commit and SHA-256 provenance. Against DeepSeek Harness commit 99f6f02fecdb7dff40c3fbc9470f5907c29f74ca, the real integrated tools/pre-execute path records 11 PASS and 3 explicitly justified N/A cases; it does not claim coverage of unwrapped or future DSH paths.

See the adapter conformance notes and the checked-in fixture provenance.

Repository layout

packages/
  core/            @dhms-agentfuse/core — zero runtime dependencies
  dsh-agentfuse/   @dhms-agentfuse/dsh-agentfuse — the DSH adapter (bundle)
ROADMAP.md         phases, version line, stop-lines

Relationship to DHMS

AgentFuse is the runtime-execution-control line of DHMS (Digital Hyperthymesia Memory Systems). The engine is a faithful TypeScript port of dhms_agentfuse's decision engine and agentfuse-evidence-schema-v0.1; decision and execution remain separate lifecycle facts.

License

Apache-2.0. See LICENSE.

渲染基于仓库 MkaliezZ/dsh-agentfuse-plugin 的 README.md。在 GitHub 查看原文 →

CLI Install命令行安装 Copy Install复制安装命令