Windows Workspace Guard v0.3.0

Windows Workspace Guard v0.3.0

Built for the new plugin settings-card support in DeepSeek Harness dsh-v0.1.0-rc.7.

New

• live bilingual settings card under Settings → Plugins
• configurable guarded PowerShell tool names
• hard blocks for registry, service, scheduled-task, ACL/ownership, junction/symlink, and nested PowerShell mutations
• review policy for process termination
• broader Git protection for restore, checkout paths, stash deletion, forced worktree removal, ref deletion, and every forced git clean

Verification

• 28/28 automated tests passed
• actual tarball installed with --ignore-scripts in an isolated directory
• installed host module imported successfully
• no install-time build step

Install

dsh plugin --profile web add github:julescules/dsh-windows-workspace-guard#v0.3.0

Restart DSH after installation. The settings card requires DSH v0.1.0-rc.7 or newer.

Asset SHA-256: FDEB010CB2799B8B725E25B881DA224277A1F25401C11C3E340F10A2EB988A7D

v0.2.0

First public release of Windows Workspace Guard for DeepSeek Harness.

Highlights:

• workspace-bound PowerShell mutation checks;
• immutable protected paths;
• risky Git operation review;
• block, one-time approval, and report-only modes;
• optional append-only JSONL audit with redacted command previews;
• 20/20 unit and adversarial tests passing.

Install:

dsh plugin --profile web add github:julescules/dsh-windows-workspace-guard#v0.2.0

SHA-256 (dsh-windows-workspace-guard-0.2.0.tgz):

2AC5C65E7B379E2887F7924D7D28CDFA1C292DDA0699E6909CBBDA9895900571