DSH Plugin Hub
Sandbox & Runtimedsh-plugin

dsh-cross-platform

Linux backend for dsh-witness/dsh-anchor: sandbox recipes (chattr + bubblewrap) and process identity tools. Every capability claim is backed by experiment numbers and control groups.

Stars
0
Forks
0
Open issues
0
Last push
Aug 16, 2026
Latest release
—
24h Growth
+0
7d Growth
+0

Installation

dsh plugin --profile <name> add "github:Wang-Lin-Chang/dsh-cross-platform#v0.1.0"

Overview

Linux backend for dsh-witness/dsh-anchor: sandbox recipes (chattr + bubblewrap) and process identity tools. Every capability claim is backed by experiment numbers and control groups.

  • Linux sandbox recipes: chattr +i and bubblewrap read-only views
  • Prevents overwrite, deletion, and forgery of evidence files
  • Filesystem isolation via bubblewrap EROFS view
  • Process identity from /proc/<pid>/stat field 22 + boot time
  • Exit protocol EXIT:<code> aligned with Windows runner
  • Experimental verification: 9 verdicts with control groups
  • Witness Linux acceptance: 34/34 stable across 3 runs
  • Honest boundaries: only verified on WSL2 Ubuntu + Node 25.8.1

Related plugins

dsh-approve-for-me

Unofficial DeepSeek Harness plugin for rule-gated automatic approval of Shell and PowerShell sandbox escalations. It applies fixed high-risk checks and literal command-prefix rules, optionally uses a tool-free LLM reviewer, grants only one allowed-once per decision, and returns uncertain requests to native human approval.

Sandbox & Runtimedsh-plugin
151TypeScriptSep 12, 2026
dsh-server-deployment

Server-side deployment for DeepSeek Harness: a zero-dependency Node gateway adds a multi-user login portal, per-user independent DSH instances with OS-level isolation, per-user API keys, and a delivery file drawer. File access runs through sudo helper scripts using runuser to drop privileges to dsh-<name> (fixes issue #1 TOCTOU). Not a local/desktop tool.

Sandbox & Runtimedsh-plugin
81JavaScriptAug 18, 2026
QAQ

QAQ is a launch resilience guard for DeepSeek Harness (DSH) by WTStarMark. It supervises the `dsh web` process, reads the browser's real DOM through headless Chrome + CDP, detects host crashes, Web UI red screens and plugin degradation, then restores the configuration snapshot from the last successful boot and restarts, preserving the broken config for manual recovery. It is described as non-invasive, shipped as a one-command script with structured logs, and includes a plugin hot-update guard (c

Sandbox & Runtimedsh-plugin
41TypeScriptAug 17, 2026
DSHBox

DSHBox is an Android application that lets users run the complete DeepSeek Harness locally on Android 10+ ARM64 devices by bundling Debian, Node.js, DSH, PRoot, and an embedded WebView into one APK without root or Termux.

Sandbox & Runtimedsh-plugin
30KotlinSep 9, 2026