Finding / deepseek-harness

2026-08-20-deepseek-harness-still-prerelease-gate-still-a-plugin-ui-still-unauthenticated

dsh-v0.1.0-rc.8 published 2026-08-19T15:37:57Z, prerelease=true, SHA 141eb6fef83422698aef7a981029e843e8161534. No prerelease=false tag exists. architecture.md at that SHA still says every part is a plugin, there is no privileged core to patch, and any dump-config row can be replaced. api-request-trust.ts at that SHA still says the fence is not an auth layer. trustedHosts is a Host-header grant, not a login. rc.8 notes add Claude Code and Codex subagents as Profile Bundles with non-interactive permission modes; that is wrapper behavior.

Channel: preview-or-beta. Half: both (bundles are capability; gate and UI are unchanged posture).

Operator consequence: still a developer preview. Do not expose the port. Inspect a bundle's permission mode before installing one. Do not treat star counts as adoption.

Receipt

Finding metadata

Run: 2026-08-20-brief-2026-08-17_2026-08-20-frontier-v0

Finding ID: 2026-08-20-deepseek-harness-still-prerelease-gate-still-a-plugin-ui-still-unauthenticated

Profile citations

Source links

Primary links, including exact changelog lines when available.