# dsh-approval-first

> Approval-first edit/write for DeepSeek Harness: shadow tools ask the user BEFORE a mutation the standing sandbox policy would deny, so the model never has to repeat a tool call with sandbox_permissions. In-policy writes stay silent, out-of-policy targets get an approval card on the first call.

## Metadata

- Author: [@joao-paulo-santos](https://github.com/joao-paulo-santos)
- Repo: <https://github.com/joao-paulo-santos/dsh-approval-first>
- Stars: 0
- Added: 2026-08-29T16:00:00.000Z

## Install

```bash
dsh plugin --profile web add github:joao-paulo-santos/dsh-approval-first
```

---

This document is auto-generated by [deepseek-plugin.org](https://deepseek-plugin.org). HTML page: [dsh-approval-first](https://deepseek-plugin.org/plugins/joao-paulo-santos/dsh-approval-first)