Second-model AI auto-review for DeepSeek Harness approval requests: a read-only reviewer subagent returns structured allow/deny verdicts with reasons, fail-closed by default, fully auditable from the session log (approval/asked -> autoReview/verdict -> approval/decided).

Bounded, layered, approval-gated, auditable cross-session memory for DeepSeek Harness: a ctx.memory capability seam with a zero-dependency SQLite provider, a memory tool, and frozen snapshot injection. Maintenance status: FROZEN since 2026-10-05.

Your personal AI runtime, local-first. Patchwork OS gives any AI model a consistent set of tools, YAML recipes, a delegation policy with approval queue, and a durable trace memory — all on your machine, all under your policy.

Claude Code-style declarative permission rules for DeepSeek Harness: ordered allow/deny/ask rules with tool-name, argument (glob/regex), and workspace-path matching on the tools/pre-execute waterfall, session-log audit, and HMR reload.

DSH permission-gate for the DeepSeek Harness 0.1.5 line: a single self-sufficient, deterministic-first, fail-closed gate covering P0 hard-deny -> P1 session grant -> P2 static rule (allow/deny) chain -> P3 optional LLM semantic classifier -> P4 ask, with

Native DeepSeek Harness (DSH) plugin integrating TypeSafe Jev or Decision api like luna as a System One decision layer for agent selection, supervision, corrections, and approvals.

MCP management console for the official DeepSeek Harness MCP client: /mcp command with health diagnostics and pipeline trial calls, a Settings MCP tab with server CRUD (approval-gated writes, automatic backups) and a tool trial console over the official tool pipeline (Apache-2.0, dsh-plugin).

MCP server for SSH: let Claude Code, Codex and any MCP client run commands, transfer files and manage servers over SSH, with human approval, an encrypted vault and a live audit trail. Desktop app and CLI included.

Approval gate and audit trail for AI agent actions: policy check first, proof after. Any MCP client.

A gateway between AI agents and Postgres: table access, masking at the source, approvals and audit.

SEO agent: GSC, keywords, local rank tracking, Business Profile, AI visibility, approval-gated fixes

A local MCP server that places a safety layer between AI coding agents and Postgres, parsing every statement, holding risky or large writes for human approval, and journaling all activity on your machine. It enables one-command undo of individual agent-made changes and blocks destructive operations outright.

A free, read-only server that lets users diagnose production AI-agent risks: it flags over-privileged API keys from permission descriptions, scans code snippets for the signals that prevent duplicate execution, and explains guard patterns such as idempotency keys, approval gates, outboxes, and circuit breakers. It makes no network calls or writes, and rejects inputs that look like real secrets.

Create, review and schedule social content from your AI agent. Approval-first.

Your agent ships the app. Alerts, logs, project memory and approval-gated deletes come with it.

Evidence-backed UI delivery for coding agents working on existing Web products: declared criteria, criterion-bound artifacts, findings linked to declarations, and repair guidance. Evaluator review does not replace human semantic approval.

Self-hostable AGPL workspace where humans and AI agents share chat, tasks, knowledge, approvals, and MCP context.

Set up human approval for your AI agents' tool calls.

SRE thinking applied to Claude Code, based on Boris Cherny's Q&A. It enforces a strict 4-stage pipeline with gates between each step. You literally cannot skip verification. You cannot ship without approval.

Opt-in, token-authenticated MCP server built into the Shelly Android terminal app: read-only tools for terminal output, git status, registered agents and repos on the phone, plus off-by-default run_command and write_file that need an on-device approval tap per call.

Give your AI agent a spending limit: approval controls and single-use virtual cards.

Agent-native trading terminal built on DeepSeek Harness. Crypto, US, CN and HK in one three-column GUI, 19+ hot-swappable connectors, dry-run by default with human approval on every live order. BYOK, no data redistribution.

A single MCP gateway that lets every agent and login on your machines reach services like Notion, Sentry, Cloudflare, Gmail and Google Calendar after signing in once, with per-agent tokens. Calls that reach other people or can't be undone wait for approval first, and every call is logged.

Enables AI agents to make policy-scoped payments with spending caps, recipient allowlists, approval thresholds, instant revocation, and an append-only audit trail in a sandbox wallet.