ssrf

Citation extraction and evidence verification for DeepSeek Harness.

A host allowlist on DeepSeek Harness web_fetch and web_search, enforced at connect time

Runtime security guardrails for DeepSeek Harness: source-backed pre-install vetting, dangerous tool-call blocking, output-leak auditing, and tamper-evident HMAC-chained logs.

Configurable non-public address allowlists for DeepSeek Harness web_fetch

SSRF-resistant public-only HTTP(S) WebFetchProvider plugin for DeepSeek Harness