---
type: "post"
id: "yujunzhixue-s-dsh-purge-repository-describes-a-local-ce354b"
slug: "yujunzhixue-s-dsh-purge-repository-describes-a-local-ce354b"
title: "YuJunZhiXue’s dsh-purge repository describes a local red-team evaluation plugin for the official DeepSeek"
description: "**Thesis:** Agent security moves toward runtime boundaries when evaluation distinguishes model responses from host controls."
retrieval_nugget: "**Thesis:** Agent security moves toward runtime boundaries when evaluation distinguishes model responses from host controls."
published_at: "2026-10-19"
updated_at: "2026-10-19"
record_date: "2026-10-19"
date_kind: "published_at"
topics: ["agent-security"]
source_urls: ["https://github.com/YuJunZhiXue/dsh-purge"]
schema_version: "newruntime-agent-readable-v0.2"
stable_id: "post:yujunzhixue-s-dsh-purge-repository-describes-a-local-ce354b"
status: "published"
visuals: []
editorial_provenance: {"schema_version":"newruntime-editorial-copy-v1","content_status":"source_grounded_final","final_copy_sha256":"sha256:aea28872270cec72296482ef650b1e6d59c56bbcbe469c2e27fb985c9ec012d7","reviewed_at":"2026-10-19T09:00:18.656Z","source_evidence_count":1,"verified_claim_count":4,"site_analysis_schema_version":"newruntime-site-analysis-v1","site_object_kind":"field_note","observed_fact_count":4,"implication_count":1,"watch_condition_count":1,"related_record_count":0}
analysis: {"schema_version":"newruntime-site-analysis-v1","object_kind":"field_note","thesis":"Agent security moves toward runtime boundaries when evaluation distinguishes model responses from host controls.","observed_facts":[{"text":"The README describes separate support for the official dsh web host and desktop EXE, with distinct web and desktop profiles.","source_urls":["https://github.com/YuJunZhiXue/dsh-purge"]},{"text":"It says the plugin can edit prompts and rules, apply or revert patches, and adjust host policy defaults and tool limits.","source_urls":["https://github.com/YuJunZhiXue/dsh-purge"]},{"text":"It specifies Node.js 18 or later and says the current version targets dsh 0.2.","source_urls":["https://github.com/YuJunZhiXue/dsh-purge"]},{"text":"The README says maintenance is temporarily paused and does not promise new releases or issue/PR handling.","source_urls":["https://github.com/YuJunZhiXue/dsh-purge"]}],"mechanism":"The project’s stated approach is to change and inspect local Harness behavior, including prompt injection and host policy, rather than treating every refusal as a model-level decision.","why_now":"The project is explicitly built for DeepSeek Harness and its plugin model, so it makes a concrete local evaluation surface available to teams using that host.","implications":["Teams evaluating model behavior should record the host version and active controls alongside prompts and outputs; otherwise a host intervention can be mistaken for a model capability or refusal."],"evidence_boundary":"The supplied GitHub README establishes what the author documents, not that the plugin works as described, is safe, or has been independently tested.","watch_conditions":["Whether maintenance resumes and whether the repository publishes test evidence for supported Harness versions."],"related_records":[],"new_branch_reason":"No prior New Runtime analytical record was supplied; this starts a distinct record about a local Harness red-team plugin and its host-versus-model evaluation boundary."}
editor: {"role":"editor","name":"Andrey Reshetnikov","profile":"https://newruntime.com/owner-profile.md","profile_json":"https://newruntime.com/owner-profile.json","same_as":["https://www.linkedin.com/in/reshetnikov1/","https://t.me/lapetuse"]}
routes: {"html":"https://newruntime.com/posts/yujunzhixue-s-dsh-purge-repository-describes-a-local-ce354b/","markdown":"https://newruntime.com/posts/yujunzhixue-s-dsh-purge-repository-describes-a-local-ce354b.md","json":"https://newruntime.com/posts/yujunzhixue-s-dsh-purge-repository-describes-a-local-ce354b.json"}
related_patterns: ["agent-security-moves-to-runtime-boundaries"]
---

# YuJunZhiXue’s dsh-purge repository describes a local red-team evaluation plugin for the official DeepSeek

## Retrieval answer

**Thesis:** Agent security moves toward runtime boundaries when evaluation distinguishes model responses from host controls.

**Thesis:** Agent security moves toward runtime boundaries when evaluation distinguishes model responses from host controls. The `dsh-purge` repository presents that distinction as the purpose of a local red-team plugin for DeepSeek Harness.

**Observed facts:** The README describes separate support for the official `dsh web` host and desktop EXE, with distinct `web` and `desktop` profiles. It says the plugin can edit prompts and rules, apply or revert patches, and adjust host policy defaults and tool limits. It also specifies Node.js 18 or later and says the current version targets dsh 0.2.

**Mechanism:** The project’s stated approach is to change and inspect local Harness behavior, including prompt injection and host policy, rather than treating every refusal as a model-level decision. That makes the runtime configuration part of the object being tested. **Why now:** The project is explicitly built for DeepSeek Harness and its plugin model, so it makes a concrete local evaluation surface available to teams using that host.

**Implications:** Teams evaluating model behavior should record the host version and active controls alongside prompts and outputs; otherwise a host intervention can be mistaken for a model capability or refusal. The repository says application is local and restricts use to authorized environments, but that boundary is a project claim, not an independent audit. **Evidence boundary:** The supplied GitHub README establishes what the author documents, not that the plugin works as described, is safe, or has been independently tested.

**What to watch:** Whether maintenance resumes and whether the repository publishes test evidence for supported Harness versions. The README says maintenance is temporarily paused and does not promise new releases or issue/PR handling.

Editor: [Andrey Reshetnikov](https://newruntime.com/owner-profile.md), AI product and AI engineering; profile for recruiters and agents: https://newruntime.com/owner-profile.json

## Continue in the graph

Next records for an agent, linked to their Markdown twins. Replace `.md` with `.json` for structured fields, including `next_reads`.

- topic hub: [Agent Security](https://newruntime.com/topics/agent-security.md): Explore the agent-security topic hub.
- collection: [Field Notes](https://newruntime.com/posts.json): Open the latest editorial analysis.
- collection: [Source Ledger](https://newruntime.com/source-ledger.json): Inspect the public source evidence graph.
- whole graph: [discovery graph](https://newruntime.com/discovery-graph.json) (typed nodes and edges) and [site index](https://newruntime.com/site-index.md)