Inceptzws/dsh-project-guard
States what an action will cost you before and after the agent touches your machine — a deterministic consequence rule system with a Preview before the decision and an optional Report afterwards.
dsh-project-guard states what an action will cost you before and after the agent touches your machine, adding the missing 'what it means for you' layer on top of authorization, sandboxing and risk assessment. When a call is asking for extra permission, its Preview carries the action, the collected state, the consequence in user-level words, the affected interest, severity and recoverability, confidence and the checked scope, and the losses of each option (execute, reject, backup-then-execute, rewrite) — so rejecting is not framed as free. An optional post-execution Report (off by default, one switch) appends predicted-vs-observed disclosure (match / false alarm / unpredicted change) with a recovery hint to actions that ran unprompted and matched a rule, turning a silent loss into something you can notice. Every consequence is scored and only the top-k above a threshold are shown; below it the plugin says nothing, and the README frames that silence as a design decision to avoid warning fatigue. It is the prototype adapter for the framework in the linked preprint: the same three interfaces analyze / preview / report, the six-family consequence rule system, and the Preview and Report modes of the informed-execution framework.
Install
dsh plugin add dsh-project-guardCopied verbatim from the README's install section. The README also documents a GitHub form (dsh plugin add github:Inceptzws/dsh-project-guard) and notes the desktop app uses Settings -> Plugins instead (that profile is managed exclusively by the app).
Compatibility
A DSH plugin with zero dependencies and no build step — every judgement is a deterministic table lookup with no model call anywhere, and it imports no Harness packages.
Details
- Repo: Inceptzws/dsh-project-guard
- Category: Agent Capabilities
- Stars: 1
- Version: GitHub repo Inceptzws/dsh-project-guard; npm package dsh-project-guard at 1.1.1 (registry check 2026-10-08; registry repository field resolves back to this repo). The README links a Zenodo preprint (DOI 10.5281/zenodo.23187648) describing the framework this plugin prototypes.
Alternatives
Letter2025/dsh-approval-llm · Jiao-XXX/dsh-auto-approve · MrWeiCodes/dsh-permgate