Evidence record / deepseek-harness

A dated record of one change, kept so the writing that cites it can be checked. Compiled from the sources listed below by the research run, not written for reading. The judgment lives in the issues that cite it, below.

2026-10-24-deepseek-harness-main-enables-plugin-management-in-standard-mode-without-removing-approval

Main enables plugin management in Standard mode without removing approval. Standard exposes tool-plugin-manager when a profile context exists, joining Creator on main. Every tool action still requires Full access or approval for that call. Lower sandbox modes with policy never, rejection, cancellation or an unavailable approval channel prevent execution. Installed Host code still runs in-process outside the workspace sandbox. Rc.2 and rc.3 retain the narrower Creator default.

Channel: main-unreleased. Half: both. Date: 2026-10-21.

Operator consequence: Source-build users can delegate plugin setup without first selecting Creator, but must decide which persistent profile changes to authorize. Inspect the package and resulting composition rather than reading a visible tool as blanket mutation permission. More agent-visible setup does not remove the deliberate admission decision.

Receipt

Finding metadata

Run: 2026-10-24-weekly-digest-2026-10-13_2026-10-24-frontier-v0

Finding ID: 2026-10-24-deepseek-harness-main-enables-plugin-management-in-standard-mode-without-removing-approval

Source links

Primary links, including exact changelog lines when available.

Versioned source: run artifact