dsh-context-provenance v0.1.0

First public release of dsh-context-provenance, an observe-only, CPU-only, local-only DeepSeek Harness plugin.

Highlights

• Reports only provenance evidence available through public DSH runtime interfaces.
• Labels every field as Observed, Estimated, or Unavailable with an explicit boundary.
• Retains only the two most recent ordinary Agent-loop request observations in memory for adjacent comparison.
• Does not return system text, messages, tool descriptions or schemas, raw plugin identifiers, raw skill source/provider identifiers, or AGENTS paths/content.
• Adds no prompt, message, tool schema, file access, network call, subprocess, persistence, model routing, or request mutation.

Install

pnpm add dsh-context-provenance

Provenance and verification

• Source commit: 3788ecbbdf9391d8ab0c29a18ed65bd59ca1c30f
• npm tarball SHA-1: 2e96ae778b9c111583eb4fdb8fbaed0434bc8ca0
• Frozen local tarball SHA-256: 171e6864445dd676ff9051060c94a7c9833d07f102b2ab202b41a7a0fb274cd4
• Local gates: 3 test files / 13 tests, lint, typecheck, build, built-artifact smoke, official-head smoke, patch validation, publint, and tarball smoke.
• Public-registry installation with lifecycle scripts disabled and Node 24 import smoke passed.

Compatibility boundary

The public-interface audit is pinned to official DeepSeek Harness commit 47f943859bef60e4160492346772ded9b24f765a. This is a deliberately incomplete evidence ledger, not a complete context provenance graph or causal explanation. Validation does not claim end-to-end Web UI, remote API, live model/provider, GPU, or billing correctness.