Evidence record / deepseek-harness
A dated record of one change, kept so the writing that cites it can be checked. Compiled from the sources listed below by the research run, not written for reading. The judgment lives in the issues that cite it, below.
2026-09-21-deepseek-harness-architecture-posture-unchanged-at-both-newest-pins-no-privileged-core-any-row-replaceable
Architecture posture unchanged at both newest pins: no privileged core, any row replaceable; never still decided before waterfall. Nothing on the carry-forward question. The approval row, the sandbox-policy row, and the new Web auth all remain replaceable by the thing they limit, if that thing can write a patch. What moved is who can write patches: 0.1.6-alpha.2 adds a Plugins page that installs and enables plugins live from the Web UI, and removes Creator mode’s dynamic Cordis tools in favor of Plugin Manager installs.
Channel: preview-or-beta. Half: neither (posture). Date: 2026-09-10 (rc), 2026-09-17 (alpha).
Operator consequence: --dump-config is still the security document. On the alpha line, anyone holding a Web session (section 2) can install a plugin, and a plugin can replace the approval row. Review the Plugins page as an admin surface, not a settings page.
Receipt
Finding metadata
Run: 2026-09-21-weekly-digest-2026-08-20_2026-09-21-frontier-v0
Finding ID: 2026-09-21-deepseek-harness-architecture-posture-unchanged-at-both-newest-pins-no-privileged-core-any-row-replaceable
Profile citations
- deepseek-harness / claim / any-row-replaceable
Source links
Primary links, including exact changelog lines when available.
Versioned source: run artifact