Escalation-only LLM reviewer for DeepSeek Harness: reviews sandbox escapes only, keeps the sandbox, fails closed.
dsh plugin --profile <profile-name> add <package-or-path>