authorization

Multi-tenant SaaS extension for DeepSeek Harness (DSH): tenant identity, session isolation, authorization, tenant-aware MCP, and audit.

WebUI 身份认证：HTTP/传输层强制登录（资源、插件 bundle、/api、WebSocket 四层防护），服务端会话 + HttpOnly Cookie。

Tailscale identity and capability authorization adapter for DeepSeek Harness

Auth-capable replacement for DeepSeek Harness client connection

Content-addressed proof that DSH authorization decisions and recorded effects agree