dsh-seatbelt-sandbox
macOS Seatbelt (libsandbox) sandbox provider plugin for DeepSeek Harness replacing deprecated sandbox-exec.
Install
$ dsh plugin --profile web add /absolute/path/to/dsh-seatbelt-sandboxPlugin Overview & Capabilities
AI-assisted organization based on the public repository snapshot. The content must be grounded in source evidence and does not replace compatibility or security verification.
Key Capabilities
- Native C11 loader calling macOS libsandbox APIs (sandbox_init) directly
- Drop-in Cordis patch replacement for @deepseek-ai/dsh-sandbox-local via cordis.patch.yml
- Dynamic SBPL profile generation matching DSH workspace-write and read-only permission modes
- Fail-closed execution model returning SANDBOX_UNAVAILABLE upon launcher or environment probe failure
- Self-testing probe verifying libsandbox availability prior to command execution
Useful For
- Enforcing kernel-level filesystem write protections during DSH agent tool execution on macOS
- Modernizing DSH macOS sandbox runtime to avoid reliance on deprecated sandbox-exec binaries
- Restricting command execution in DSH web profiles with strict workspace isolation
Who It Fits
- macOS DeepSeek Harness self-hosted users
- Developers needing secure local execution environments for DSH agents
- Security-focused teams running AI agent workflows on Apple Silicon
Documented Limitations
- macOS only; not usable on Linux or Windows environments
- Primary prebuilt binary support focuses on macOS arm64; darwin-x64 requires manual native compilation
- Git-based installations require local C compilation with macOS Command Line Tools
DSH Compatibility
Version-specific runtime evidence collected by DSH Plugin. A missing result means we have not tested that combination yet.
Security Signals
Objective signals discovered from package metadata and source inspection. These are not a guarantee that a plugin is safe.
Source & Registry Notes
Public provenance, Registry classification, and the latest source check for this entry, kept separate from runtime verification.
- Source repository
- drscrewdriver/dsh-seatbelt-sandbox
- Registry source
- GitHub · dsh-plugin topic
- Registry classification
- Plugin
- Source checked
- f6d3ce7 · 2026-09-17
This project is independently indexed from public source information. DSH Plugin is not affiliated with DeepSeek or the plugin author. Always check the author repository before installation.
Repository Activity
- GitHub stars
- 1GitHub stars
- Forks
- 0
- Open issues
- 0
- Last commit
- 2026-09-16
- Last release
- No release detected
Related DSH Plugins
Ranked by overlapping capabilities, use cases, plugin type, categories, and DSH profile.
Sandbox-first automatic permission policy and intelligent risk classification for DeepSeek Harness.
View plugin →Second-model AI auto-review for DeepSeek Harness approval requests with fail-closed safety and session audit.
View plugin →Native SQLite-backed local project taskboard plugin and UI for DeepSeek Harness with Agent claim and review flows.
View plugin →Compatibility bridge and host ABI enabling unmodified Pi plugins to run natively on DeepSeek Harness.
View plugin →