Evidence record / deepseek-harness
A dated record of one change, kept so the writing that cites it can be checked. Compiled from the sources listed below by the research run, not written for reading. The judgment lives in the issues that cite it, below.
2026-10-24-deepseek-harness-the-rc-upgrade-promotes-python-ptc-filesystem-confinement
The rc upgrade promotes Python PTC filesystem confinement. Custom Python PTC compositions now require sandbox and sandboxPolicy, apply the shared filesystem policy to direct Python operations, and fail restricted runs with sandbox-unavailable if confinement cannot be established. Shipped profiles continue using Node. This removes the earlier contract in which direct Python operations ran without confinement; it is not a current-backend exploit test or an older-CVE fixed-version designation.
Channel: preview-or-beta. Half: both. Date: 2026-10-17.
Operator consequence: Supply the shared services when upgrading a custom Python composition, then test allowed workspace writes, denied outside writes and reported enforcement. The useful primitive is one shared file policy across direct execution and tools, while enforcement qualification remains backend-specific operator work.
Receipt
- https://github.com/deepseek-ai/deepseek-harness/commit/11a0f85b34068b25a16ab45a6f8f38dc86f93d7c
- https://github.com/deepseek-ai/deepseek-harness/blob/1f81c047fc48fa190a683e469daa699857e9afe8/docs/upgrade-guide/v0.2.1-alpha.1/python-ptc-sandbox/guide.md
- https://github.com/deepseek-ai/deepseek-harness/releases/tag/dsh-v0.2.1-rc.1
Finding metadata
Run: 2026-10-24-weekly-digest-2026-10-13_2026-10-24-frontier-v0
Finding ID: 2026-10-24-deepseek-harness-the-rc-upgrade-promotes-python-ptc-filesystem-confinement
Profile citations
- deepseek-harness / claim / python-ptc-confinement-rc
Source links
Primary links, including exact changelog lines when available.
- commit2026-10-24-deepseek-harness-the-rc-upgrade-promotes-python-ptc-filesystem-confinementgithub.com/deepseek-ai/deepseek-harness/commit/11a0f85b34068b25a16ab45a6f8f38dc86f93d7ctagged commit file2026-10-24-deepseek-harness-the-rc-upgrade-promotes-python-ptc-filesystem-confinementdeepseek-ai/deepseek-harness / docs/upgrade-guide/v0.2.1-alpha.1/python-ptc-sandbox/guide.mdgithub release2026-10-24-deepseek-harness-the-rc-upgrade-promotes-python-ptc-filesystem-confinementdeepseek-ai/deepseek-harness / dsh-v0.2.1-rc.1
Versioned source: run artifact