Finding / deepseek-harness

2026-10-13-deepseek-harness-session-log-upload-is-enabled-in-the-default-rc-install-the-telemetry-environment-switch

Session-log upload is enabled in the default rc install; the telemetry environment switch does not disable it. The earlier alpha-only upload default reached the rc line and the default npm install. Eligible requests through the DeepSeek adapter can include a bounded contiguous prefix of unaccepted session events, with an 8 MiB default cap; successful HTTP responses advance the local acceptance watermark. Re-enabling resumes the backlog, including events recorded while disabled. Event headers include cwd, and the prepared data can include tool results and log-only events. An ineligible Session or oversized/unserializable first event can omit the extension. DSH_TELEMETRY_DISABLED affects a different plugin.

Channel: preview-or-beta. Half: defect. Date: 2026-09-23 (first rc, 0.1.7-rc.1); retained in 0.2.0-rc.2.

Operator consequence: Before the first request, set session-log-deepseek enabled: false, disable plugin-package-inventory-deepseek, and set DSH_TELEMETRY_DISABLED=1; confirm the composed configuration with --dump-config. Do not later re-enable upload on a Session whose backlog must stay local. DeepSeek-adapter baseURL relays receive the extension too; pi-ai/custom-provider routes do not use this extension. Review Desktop product-analytics separately, because it has no user-facing switch. Do not infer unrestricted account-token forwarding from the log-extension destination behavior.

Receipt

Finding metadata

Run: 2026-10-13-profile-refresh-2026-09-21_2026-10-13-frontier-v0

Finding ID: 2026-10-13-deepseek-harness-session-log-upload-is-enabled-in-the-default-rc-install-the-telemetry-environment-switch

Profile citations

Source links

Primary links, including exact changelog lines when available.