Phocinae/dsh-phocinae ↗★ 0

dsh-phocinae

Local non-generative decision layer for DeepSeek Harness: the phocinae_ask / phocinae_gate tools backed by a Phocinae-Largha-150M-v1 server, plus a fail-closed approval gate on tools/pre-execute with a calibrated-confidence escalation signal 适合需要本地化、低延迟且安全可控的智能体操作审批机制。

패키지
dsh-phocinae
호환성
미검증
Cordis peer 범위
^4.0.5-alpha.1
버전
0.2.5
라이선스
Apache-2.0
최근 업데이트
2026. 10. 12.

같은 패키지 이름의 다른 저장소

설치

$npx -p @deepseek-ai/dsh dsh plugin --profile web add github:Phocinae/dsh-phocinae

Configuration

Defaults live in cordis.patch.yml and are documented in lib/config.mjs. Every key has a default, so the bundle patch can be reduced to enabled: true.

keydefaultmeaning
endpointhttp://127.0.0.1:8155/v1/systemonedecision service. Loopback only — the decision state carries raw tool-call text, so a remote host is a load-time error unless allowRemoteEndpoint: true.
modelPhocinae-Largha-150M-v1served model name
timeoutMs3000per request; one attempt, no retry
escalateAt0.6confidence below this marks an answer escalate: true
maxStateChars4096cap on the rendered decision state
permuteChoicefalsepermutation-average choice questions (4x forwards)
gate.enabledtruearm the pre-execute gate
gate.modeharmharm / tri-state / noul / off
gate.threshold0.8noul mode only: P(risky) that counts as a positive signal
gate.minConfidence0.45below this, an allow becomes a review
gate.autoAllowsee DEFAULT_AUTO_ALLOWcommands passed without asking the model
gate.tools['*']tool names to screen: exact, * globs, or *
gate.failModeclosedclosed = unreachable service asks a human; open = allow
gate.riskyDecisiondenynoul mode only: deny or ask on a positive finding
gate.audittruelog every verdict through the host logger

To screen nothing and only use the tools:

- id: phocinae
  config:
    gate:
      mode: off

To screen only the shell, and only ask:

- id: phocinae
  config:
    gate:
      tools: ['pwsh', 'bash']
      riskyDecision: ask