secret-scanning

Prompt-injection, jailbreak, and secret-leak defense for DeepSeek Harness: Aho-Corasick detection with allow/ask/block interception and sanitized audit events

Irreversible secret-scrubbing guard plugin for DeepSeek Harness (dsh): regex redaction of secrets before session-log persistence and model requests

Git security upload guard: auto secret/risk scan before commit & push (git hooks) + optional LLM deep review (L2/L3)

Blocks high-confidence secrets before dsh-TUI sends them to a model, compliant with dsh ecosystem manifest v0.15.

Local, zero-network, fail-closed secret preflight for DeepSeek Harness model requests.