dsh-instruction-audit

dsh-instruction-audit

dsh-instruction-audit records privacy-minimal receipts for the workspace
instruction files that DeepSeek Harness actually placed into a session. It is
an independent community bundle, not an official DeepSeek AI package.

It observes the durable agent-instructions message source already emitted by
the Harness. Each receipt contains the session id, event sequence/time,
baseline flag, logical scope, display path, action, and producer-owned content
digest. It never reads instruction files, stores instruction text, modifies a
workspace, or changes prompt assembly.

The published bundle has no runtime npm dependencies. It uses the existing
Cordis context supplied by the active Harness process and only imports that
type while building.

This is useful when auditing which AGENTS.md/CLAUDE.md files actually
affected a session, especially after a nested-workspace boundary or instruction
budget incident.

Install

Build a portable tarball first:

pnpm install
pnpm pack
dsh plugin --profile web add ./dsh-instruction-audit-0.1.1.tgz

The bundle writes receipts under $DSH_HOME/instruction-audit/v1/. File names
are SHA-256 hashes of session ids; the id remains inside each JSONL receipt.
Override the location without changing Harness state:

- id: instruction-audit
  config:
    receiptRoot: /absolute/path/to/receipts

Read one session's receipts:

dsh-instruction-audit --session session-123

Evidence Boundary

--dump-config proves only that the layer composes. A release must also be
tested by installing the packed tarball into a temporary DSH_HOME, booting a
real loopback Web profile, emitting a real durable user/message event with
the Harness agent-instructions source, observing one receipt, and confirming
that its JSONL contains no instruction body.

The plugin deliberately does not infer instructions from the filesystem. A
receipt proves only the structured source the Harness logged; it does not prove
that a model followed the instructions or that a digest is a security boundary.

Verification

Version 0.1.1 was verified against DeepSeek Harness source revision
47f943859bef60e4160492346772ded9b24f765a by:

1. Building the Harness production libraries and Web frontend.
2. Packing this repository, then installing the tarball with
   dsh plugin --profile web add into a fresh DSH_HOME.
3. Booting the actual loopback Web profile.
4. Appending an agent-instructions user message through the real
   SessionStore publication path, then reading its receipt with this package's
   installed CLI.

The proof used a distinct instruction-text sentinel and confirmed it was not
present in the persisted JSONL. Unit coverage also checks malformed events,
replace/remove transitions, and same-session write order.

License

MIT