dsh-route-certificate

Experimental community RouteCertificate observer for the DeepSeek Harness developer preview. It watches durable terminal turns, invokes an operator-supplied external validator, and writes separate receipts without replacing the raw Harness result.

Status: advisory, disabled by default, not official DeepSeek software, and not published to npm. Use an isolated disposable Harness profile for testing.

What is verified

• The repository test suite passes 18/18 on the accepted package.
• The bundle has been loaded through the official dsh 0.1.0-rc.6 plugin/profile path in an isolated profile, both disabled and active, then removed with effective configuration restored byte-for-byte.
• The active loader smoke used explicit operator-supplied runtime metadata only. It did not call a model, create a real provider session, or invoke a real RouteCertificate validator.
• The reviewed Harness source was commit 47f943859bef60e4160492346772ded9b24f765a (0.1.0-rc.5). The public CLI was separately observed at 0.1.0-rc.6; source-to-package correspondence and broad rc.6 compatibility are not proven.

This project does not claim truth, enforcement, quality improvement, token savings, production fitness, or official endorsement. Hashes and receipts bind inputs and outcomes; they do not prove that a result is correct.

Official Harness friend test (recommended)

For a friend who already has the official DeepSeek Harness developer-preview CLI, use its plugin manager directly. The CLI must also be able to invoke pnpm. Test in a new disposable profile first; plugin-manager commands can initialize or leave package-manager bookkeeping in that profile.

git clone https://github.com/runyuan-wang/dsh-route-certificate.git
cd dsh-route-certificate
npm pack

PROFILE="routecert-friend-$(date +%s)"
TGZ="$(pwd)/dsh-route-certificate-0.0.1-local.20260814.1.tgz"

dsh plugin --profile "$PROFILE" add "$TGZ"
dsh --profile "$PROFILE" --dump-config
# Verify that dsh-route-certificate is present and mode is disabled.

dsh plugin --profile "$PROFILE" remove dsh-route-certificate

After removal, inspect the disposable profile before deleting it. The official remove path may leave pnpm bookkeeping; remove only the profile created for this test, never an existing user profile. If a friend chooses an existing profile instead, back it up first and compare the effective configuration before/after.

Repository self-test (optional for code reviewers)

The deterministic repository suite requires Node.js and npm: