@ironlaw/adapter-dsh

IronLaw on DeepSeek Harness (DSH).

IronLaw is a DeepSeek Harness orchestration plugin. Built on ordinary coding tooling (hooks / sidecar / MCP), it turns thousands of real engineering pitfalls into three automated guardrails: block dangerous actions before they run, record verifiable evidence as they run, and refuse "done" without proof.

This package is a native Cordis plugin, not an MCP bridge. It hangs off the DSH extension points themselves.

What it does

Capability	DSH extension point	Behavior
Tool-call evidence	tools/pre-execute, tools/result	Records every tool call's intent and outcome to an append-only NDJSON ledger
Destructive-action blocking	tools/pre-execute (waterfall)	In enforcer mode, blocks destructive tools before they run
Durable session evidence	session/event	Appends every durable session event and tracks per-turn tool evidence
Completion gate	agent/turn-stopping (serial)	Before a turn closes, requires verifiable tool evidence; otherwise steers a repair prompt back to the agent

The evidence ledger is host-agnostic (host: 'dsh'), so the same evidence chain can span DSH and the other IronLaw adapters.

Install

npm install --global @deepseek-ai/dsh
dsh plugin --profile web add @ironlaw/adapter-dsh

Or enable it as a one-off patch overlay without installing:

dsh web --patch "$PWD/cordis.patch.yml"

Configuration

Configuration is read from the environment (the bundle patch stays minimal):

Variable	Default	Meaning
IRONLAW_MODE	observe	observe records only; also blocks destructive tools