zhang8019/dsh-permission-matrix ↗★ 0
dsh-permission-matrix
DSH 权限矩阵插件，提供 9 种安全预设、三级风险策略、LLM 裁判、审计日志与 Git 检查点。
AI 分析
核心用途是精细化控制 Agent 执行高危操作（如写文件、执行命令）的审批流。适合需要平衡自动化与系统安全性的用户。
安裝
$
npx -p @deepseek-ai/dsh dsh plugin --profile web add github:zhang8019/dsh-permission-matrix說明文件
閱讀完整 README ↗Configuration
Settings → Permission Matrix, or the permission-matrix row of /cordis.patch.yml:
| Key | Default | Meaning |
|---|---|---|
enabled | true | master switch |
takeover | see above | preset id → tier (auto-allow / classify) |
midRiskPolicy | deny | deny / allow / ask |
llmJudge | true | enable the LLM judge |
judgeProvider / judgeModel | empty | empty = follow the current session model |
judgeStages | both | both / fast / thinking |
autoAllowHardGuard | true | hard-deny protection in the auto-approve tier |
robotDefaultPreset | fa-auto | default preset for robot sessions |
robotWorkspaces | [] | robot session workspaces (absolute paths, subdirs included) |
gitSnapshot | true | git checkpoint before granting |
gitSnapshotIntervalMs | 30000 | checkpoint throttle |
auditLog | true | audit switch |
auditFile | ~/.dsh/permission-matrix/audit.jsonl | audit path |
Invalid configuration (unknown preset id, illegal tier) fails loudly at load time instead of silently degrading.