# Security

## Snapshot scope

This plugin snapshots files with an independent Git index. The source repository's `.gitignore` does not restrict snapshot contents. Only the configured `exclude` pathspecs do.

The default bundle excludes `.git`, `node_modules`, `.env`, `.env.*`, and `.DS_Store`. These defaults are not a credential scanner and cannot identify every secret filename. Before using the plugin, add project-specific credentials, private data, generated artifacts, package caches, and other unsuitable paths to the complete `exclude` list.

Snapshots are stored as unencrypted Git objects below `storageRoot`. Child workspaces contain restored files in ordinary filesystem form. Protect both locations with appropriate operating-system permissions and disk encryption.

## Trusted code

A DSH bundle runs trusted code in the host process, outside the Agent sandbox. Review and pin the source you install. Do not install this package, or any DSH plugin, from an untrusted fork or mutable Git reference.

## Supported versions

The `0.1.0-alpha.x` line is tested on Windows against the exact DSH version listed in the README. Linux and macOS are not yet supported claims. DeepSeek Harness is in developer preview; upgrade compatibility is not assumed.

## Reporting a vulnerability

Use GitHub's private vulnerability reporting for `Yu-Zhuang1/dsh-workspace-snapshot-fork`. Do not include credentials, private snapshot contents, or a working exploit in a public issue. If private reporting is unavailable, open a minimal issue requesting a private contact channel.