Политика
Доверие, безопасность и этика
DeepSeek Harness — local-first runtime для coding-агента. Эта страница повторяет официальные Safe Use Policy и SAFETY без изменения смысла.
Политика законного использования
During download and use of DeepSeek Harness you must not use the software or its derivatives for military purposes; for cyberattacks or chemical or biological attacks; for harmful manipulation of people; for exploiting or harming others; for generating or spreading verified false information intended to harm; for content that violates applicable rules; for generating or spreading personal data without authorization; for defaming or harassing others; or for any use that violates applicable law or third-party rights.
If you believe a use violates those restrictions, the official policy asks you to report it through the repository contact [email protected]. This website does not operate that inbox.
Этичное использование
The agent can run code and act on your machine. Prompt injection remains a risk when the runtime reads the network or other untrusted data. Official precautions:
- Use a dedicated virtual machine or container with limited privileges.
- Review generated code and tests before you keep them.
- Avoid giving the agent sensitive or confidential information.
- Require human approval for operations that change important systems.
- Split complex instructions so a single bad command has a smaller blast radius.
- Install only reviewed plugins, MCP servers, Skills, Hooks, and dependencies.
Прозрачность исходников
0.1.x is MIT-licensed. The official tree is deepseek-ai/deepseek-harness. The published CLI is @deepseek-ai/dsh. Third-party notices ship in THIRD_PARTY_NOTICES.md. npm publishes shasums and signatures per version; numbers are listed on Заметки по SHA и подписям.
Community plugin indexes are not the official contract. A topic tag is discovery, not endorsement.
Уточнение про отсутствие malware
The published CLI is source-inspectable npm software. This site does not ship an unsigned Windows installer and does not bundle advertising modules. Heuristic antivirus flags on Node plus shell spawn are expected noise, not a finding by themselves.
That statement is not a security audit. Third-party plugins can execute with the same OS user. A same-user process can read credential files even under workspace-write. You review what you install.
Ответственность пользователя
Use DeepSeek Harness at your own risk. The software is provided without warranty under the MIT License. To the maximum extent permitted by law, authors and copyright holders are not responsible for damage to computers, loss or disclosure of data, loss of files, or other harm from use of the project.
Do not rely on DeepSeek Harness as the sole security control for untrusted workloads. File-effect modes, approval prompts, and Seatbelt / bwrap / Windows ACL backends reduce risk. They do not isolate the host.
Практики первого запуска and the safety FAQ repeat the same bounds in shorter form.