@deepseek-ai/dsh-popper

Configuration

Key	Default	Meaning
mode	observe	observe: record the model's protocol without executing gates; strict: arm and execute gates
backstopRounds	6	consecutive protocol-invalid rounds before escalation
noveltyRejectLimit	3	consecutive novelty rejections -> frontier exhausted
riskyTools	[write, exec, patch, delete]	tool names that trigger gate validation
gateRegistry	[]	deterministic gates: { id, command, timeoutMs? }. In strict, must be non-empty; commands come only from the task contract, the model references gate ids
falsificationToolName	falsification	model-facing protocol tool name
gateTimeoutMs	120000	gate execution timeout
outputCapChars	2000	gate output injected back (head + tail)

strict with an empty gateRegistry or empty riskyTools fails loud at load.

Example cordis.patch.yml override (a later patch layer restates the whole row):

- id: popper
  name: '@deepseek-ai/dsh-popper'
  config:
    mode: strict
    gateRegistry:
      - id: typecheck
        command: pnpm run typecheck
        timeoutMs: 120000