@lyc0110

DSH pre-execute gate: ask before a tool call leaks a credential, stops a service, or rewrites host network/registry state.

Guardrail for DSH llm/stream: detects when model reasoning or text degenerates into a periodic repetition loop and aborts the request instead of streaming until you give up.