a5557/dsh-agent-guard

DeepSeek Harness guardrail plugin: evidence-first read-only inspection plus write-time protection of DSH private storage. One command captures authoritative state - workspace registration, session identity headers, directory layout, host running state - so a count difference is never mistaken for data loss; writes to protected paths are intercepted before dispatch, backed up first, and never allowed while the host may still be running. No network, no telemetry, zero runtime dependencies.