dsh-gov
Agent governance suite: policy-based tool gating (allow/deny/ask with wildcards and priorities), a structured JSONL audit trail, and per-agent token quotas against the host token meter, with state under $DSH_HOME/gov.
Agent 治理套件：基于策略的工具门禁（allow/deny/ask，支持通配符与优先级）、结构化 JSONL 审计日志、基于宿主 token 计量的按 agent 配额，状态存于 $DSH_HOME/gov。
How to install
dsh plugin add dsh-gov About
dsh-gov — Agent Governance Suite (enterprise companion) 权限、审计、成本 —— DSH 进企业前必须有的东西，做成一个插件。策略门禁（allow/deny/ask）、结构化审计日志、按 agent 的 token 配额，状态持久化在 $DSH_HOME/gov/。 为什么需要它 企业引入 DSH 时第一波问题永远是： **谁能让 agent 跑高危工具？** 策略门禁：按工具/agent/工作区规则，allow / deny / ask，通配符 + 优先级，默认放行、命中即裁决、平局 fail-closed（deny > ask > allow）。 **出事了怎么追溯？** 每次工具调用（决定 + 结果）都写入结构化 JSONL 审计日志（audit.jsonl），可查询、可导出、可汇总。 **钱花哪去了？** 接宿主 tokenMeter，按 agent 累计 token 用量，周期配额（day/week/month/total），超限注入上下文警告，可一键重置。 安装 bash dsh plugin --profile <profile> add dsh-gov 用法（模型侧） 工具 gov，action 一览： | action | 说明 | | --- | --- | | status | 治理总览：规则数、审计事件汇…
Recommendation signals
Meta
- License
- MIT
- Language
- JavaScript
- GitHub stars
- 0
- mo. downloads
- 238
- Last push
- 2026-09-11
- Created
- 2026-08-17
Basic safety check
- Findings
- None
- Sources
- curated:awesome-dsh-plugin.com, curated:awesome-dsh-plugin/awesome-dsh-plugin
- Topics
- compliance, cordis, deepseek-harness, dsh-plugin, governance, security
Related plugins
dsh-auto-mode
NanmiCoder/dsh-auto-mode
Adds an Auto permission preset between Workspace Write and Full access: routine work stays in the official workspace-write sandbox while the current session model reviews escalation and destructive calls, granting one exact wider access once, asking when the intent is ambiguous, and denying critical paths.
dsh-passwords
slywalker2006/dsh-passwords
Turns DeepSeek Harness into a server-grade multi-tenant platform: remote access + auto HTTPS, subuser permissions & token/daily quotas, sandbox enforcement, encrypted auth & audit log.
sofagent
KongFangXun/sofagent/tree/main/engine/dsh-plugins/cordis-plugin-sofagent-audit
Commit-time audit harness for AI coding agents: 24 git-diff rules (secrets, out-of-scope edits, prompt injection), HMAC-signed audit trail, snapshot rollback, and an MCP server with 84 tools. Installable via dsh plugin add.
dsh-vault
Ox0400/dsh-vault
Encrypted local credentials vault for the Harness: a web settings page and vault_* tools to store, search and copy passwords, API keys, TOTP secrets and card data, with health audits, expiry rotation, imports/exports and read-only/ask access modes.