dsh-egress-guard

Runtime security gate for DeepSeek Harness: egress host allowlist, secret redaction in tool results, and an append-only audit log

AI 分析

核心用途是监控并拦截 AI 智能体的不安全外网连接，并对输出的敏感数据进行遮蔽。适合对数据防泄露（DLP）和网络边界安全有严格要求的企业用户。

パッケージ

dsh-egress-guard

バージョン

0.1.0

ライセンス

MIT

最終更新

2026/08/15

Configuration

Key	Default	Meaning
`mode`	`monitor`	`off` registers nothing. `monitor` evaluates and audits without acting. `enforce` denies and redacts.
`egress.allowHosts`	`[]` in schema, a starter list in the bundle	Permitted hosts. `.example.com` covers the apex and* every subdomain. An empty list means denylist-only.
`egress.denyHosts`	`[]`	Always denied. Beats `allowHosts` and `allowLoopback`.
`egress.allowLoopback`	`true`	Exempts `localhost`, `127.0.0.0/8`, `::1`, `*.localhost`.
`egress.onViolation`	`deny`	`ask` routes to `ctx.approval` instead — and degrades to deny when no approval service is mounted.
`redact.builtins`	`true`	Private keys, vendor API keys, JWTs, bearer headers, `KEY=value` assignments.
`redact.extraPatterns`	`[]`	Extra regex sources, compiled with the global flag.
`redact.placeholder`	`[redacted:{name}]`	`{name}` is the pattern that matched.
`audit.path`	`$DSH_HOME/egress-guard.jsonl`	JSONL, one decision per line.
`audit.logAllowed`	`false`	Also record calls that named a host and passed — this is how you build an allowlist out of real traffic.