PerryLink / dsh-permission-rules
Claude Code-style declarative permission rules for DeepSeek Harness: ordered allow/deny/ask rules with tool-name, argument (glob/regex), and workspace-path matching on the tools/pre-execute waterfall, session-log audit, and HMR reload.
Why this job: topics: sandbox, ai-safety

Get started
No single install command. Read the steps in the README (opens in new tab)
- Maintenance
- Active
- Last commit today
- Stars
- 136
- +2 this week
- Licence
- Apache-2.0
- Allows business use
- Downloads for
- None listed
- No release files
- Latest version
- v0.7.20
- Released 22 days ago
- Built with
- TypeScript
- 91% of the code
Is it looked after?
- Contributors
- 2
- Last 90 days
- Issues
- 90% closed
- 2 still open
- Pull requests
- 24 merged
- 0 waiting
- Releases
- 51
- 30+ in the last year
Similar repos
| Repo | Stars | Last commit | Licence | Downloads for |
|---|---|---|---|---|
| provos / ironcurtain | 652 | 10 days ago | Apache-2.0 | No downloads |
| SteelUnion / dsh-confirm-gate | 101 | 8 days ago | MIT | No downloads |
More: languages, topics and project record
Languages
- TypeScript 91%
- JavaScript 6%
- Python 4%
Topics
- ai-safety
- approval
- cordis
- deepseek
- deepseek-harness
- dsh
- dsh-plugin
- permission
- policy
- safety
- allow-deny-ask
- network
Project record
- JobAI security
- StatusListed
- Commits292
- Forks4
- Watching0
- Stars in 28 days+24
- CreatedAug 13, 2026
- First seen by usNov 7, 2026
- CheckedNov 9, 2026
