dsh-context-guard 0.1.0

The first public release of a task-contract and completion-certification layer for DeepSeek Harness.

Highlights

Captures requirements, prohibitions, acceptance criteria, and later revisions with stable IDs.
Derives bounded evidence from persisted DSH tool events and fails closed on unknown, stale, failed, or object-mismatched evidence.
Requires method, operation, subject, surface, and independent state verification where the contract calls for them.
Re-verifies certificates during replay and protects Goal completion and whole-task completion claims.
Supports DSH resume, compaction recovery, HMR, slash commands, Code Mode dispatch evidence, and a bounded checkpoint tool.
Uses an intentionally small, documented POSIX shell and PowerShell certification subset; unsupported syntax produces no certifying effect.

104 tests total, including 85 domain/core tests.
GitHub Actions passed on Windows, macOS, and Ubuntu with Node.js 22 and 24 for both the release commit and annotated tag.
Independent native real-model acceptance passed on macOS and Windows using clean public checkouts and isolated DSH homes.
The accepted product implementation is ad8a610bf9b6b0fdee06a0fba5392d267d2ff327; the tagged successor ed8b25546158fcf695081fd2d554f80f2bdf8d31 changes release documentation only.

这是面向 DeepSeek Harness 的任务合同与完成认证层的首个公开版本。

使用稳定 ID 捕获 requirement、prohibition、acceptance criterion 及后续修订。
只从已持久化的 DSH 工具事件派生有界证据；未知、过期、失败或对象不匹配的证据均不能认证完成。
合同需要时，同时约束 method、operation、subject、surface 与独立状态验证。
replay 时重新验证证书，并保护 Goal complete 与整任务完成声明。
支持 DSH resume、compaction recovery、HMR、slash command、Code Mode dispatch 证据和有界 checkpoint 工具。
只认证文档明确列出的精简 POSIX shell / PowerShell 子集；不支持的语法不产生可认证 effect。

全项目 104 个测试，其中 domain/core 85 个。
release commit 与注释 tag 均通过 Windows、macOS、Ubuntu × Node.js 22/24 的 GitHub Actions。
macOS 与 Windows 均从公开仓库干净检出，在隔离 DSH home 中通过独立真实模型闭环验收。
已验收的产品实现为 ad8a610bf9b6b0fdee06a0fba5392d267d2ff327；tag 对应的 successor ed8b25546158fcf695081fd2d554f80f2bdf8d31 只更新发布文档。