# Security model

`dsh-process-guardian` is a defense-in-depth guardrail for accidental, model-authored process termination. It is not an operating-system security boundary.

The plugin inspects DSH shell-tool command strings before dispatch and blocks recognizable commands that target the DSH host PID, process group, executable name, parent reference, or web port. This covers direct `kill`, `pkill`, `killall`, common `xargs` pipelines, literal Node/Python process APIs, PowerShell `Stop-Process`, Windows `taskkill`, and submitted persistent-terminal commands.

It cannot reliably inspect termination hidden inside an opaque executable, package script, downloaded script, encoded payload, native program, or command assembled across several terminal writes. It also cannot stop a process outside DSH from signaling the host. Use a separate OS user, container, VM, or syscall policy when hostile-code isolation is required.

Please report a bypass that affects normal model-authored commands through a private GitHub security advisory. Include the DSH version, plugin version, operating system, tool name, and a minimized command. Do not include credentials or private workspace contents.