Evidence record / deepseek-harness

A dated record of one change, kept so the writing that cites it can be checked. Compiled from the sources listed below by the research run, not written for reading. The judgment lives in the issues that cite it, below.

2026-10-24-deepseek-harness-saved-credentials-win-in-web-and-desktop-while-headless-stops-loading-them-by-default

Saved credentials win in Web and Desktop, while headless stops loading them by default. With the saved provider mounted, credential resolution uses saved values before the launch environment, then project .env, then home .env. The launch environment is captured at process start. The shipped headless composition disables the saved-credential provider and resolves environment and .env sources instead. This changes which account or key pays for a run without changing the visible prompt.

Channel: preview-or-beta. Half: both. Date: 2026-10-14.

Operator consequence: Audit key provenance when upgrading a desktop trial or moving it into automation. Do not assume exporting a new key overrides a saved Web key, or that a previously signed-in desktop supplies headless credentials. Explicit credential configuration removes an interactive dependency for automation but makes provenance and cost attribution the operator’s responsibility.

Receipt

Finding metadata

Run: 2026-10-24-weekly-digest-2026-10-13_2026-10-24-frontier-v0

Finding ID: 2026-10-24-deepseek-harness-saved-credentials-win-in-web-and-desktop-while-headless-stops-loading-them-by-default

Profile citations

Source links

Primary links, including exact changelog lines when available.

Versioned source: run artifact