Framework
Plugin framework that DeepSeek Harness is built on, enabling replaceable models, tools, sessions, sandboxes, storage and agent loops.
DeepSeek Harness, DeepSeek's open-source agent runner, carries a 9.4-severity flaw that lets a sandboxed agent grant itself full access with one command. Its control API has no authentication and trusts a client-supplied Host header.
Reality
DeepSeek released its open-source Harness agent runtime as a Windows and macOS desktop app on September 30, so users no longer need a command line to run it. The agent edits local files and runs commands, so what each user exposes to it decides what it can touch and which provider sees it.
Perspective Coverage
3 publishersReality
Harness v0.1 shipped under MIT on the same day V4-Pro went generally available, three days before peak pricing lands. The lock-in it targets is the runtime, not the weights.
Perspective Coverage
4 publishersReality
The MIT-licensed dsh runtime bundles sessions, tool calls, permissioning and a local web UI, with model adapters as plugins covering Anthropic, OpenAI, Bedrock, Vertex and Azure. It is still a preview.
Reality
A registry that assigns a new plugin straight into the slot can leave a daemon without a capability when setup throws. Moult stages the candidate in a private scope, verifies it, commits atomically, then disposes the old generation.
Reality
Ao Qu and collaborators open-sourced Reef on September 15th, an OpenAI-format inference server that stamps each response with a record ID, matches later feedback to that ID, and publishes a retrained artifact only if its evaluation stage accepts it.
Reality
DeepSeek Harness is an MIT-licensed developer preview in which the model adapter, tool registry, session log and agent loop are all plugins. The interesting part is what that implies for evaluation.
Reality
Four subsystems are all Cordis plugins at the pinned commit, which turns extension into an architecture decision. The same guide records GitHub at rc.8 and npm at rc.7.
Reality