# Security policy

## Supported versions

| Package | DSH | Status |
| --- | --- | --- |
| 1.6.x | 0.2.1-rc.2 | supported |
| 1.6.x | 0.2.0-rc.2 | supported with the 0.2.0 layout |
| older | any | no longer supported |

The plugin is version-sensitive by design. A DSH update that changes the private seams it
uses makes the affected component refuse to install rather than run against an unknown
contract.

## What this package can do

This is privileged local code inside the DeepSeek Harness Host:

* it shadows official service methods while its components are loaded;
* it can start, message, interrupt, and change the model of teammates according to the
  official authority rules;
* it can rewrite the parent address of a **history read** when, and only when, the supplied
  parent is a genuine ancestor of the child's actual parent;
* it reads local session headers and official in-process services.

It does **not**:

* make network requests or send telemetry;
* read or store API keys, tokens, or credentials;
* upload session content;
* create a second team, board, or journal;
* grant a manager authority outside its actual descendant zone;
* allow an arbitrary session read by id.

## Reporting a vulnerability

Please use GitHub's private security advisory flow:

<https://github.com/funk80rus/dsh-agent-teams-model-override/security/advisories/new>

Do not open a public issue for a vulnerability, and do not attach raw session logs, profile
snapshots, credentials, or absolute home paths. A minimal description and, if needed, a
redacted trace are enough.

Useful reports include:

* the DSH version and the package version;
* the component row that was enabled;
* the exact error code/message;
* whether the issue is a wrong authority decision, a bypass of the Host's parent check, a
  leaked secret, or a crash.

## Installing safely

Install from a commit or release you trust. The package is not published to npm; the
recommended source is this repository. Review `cordis.patch.yml` and the committed
`runtime/<hash>/` graph if you need to audit exactly what the Host loads.