Per-tool Ai/human/never Policies Plus Regex Risk Rules

A DeepSeek Harness plugin that puts a second, read-only reviewer subagent on the approval chain: it inspects tool arguments and workspace evidence, returns structured allow/deny verdicts with reasons, and fails closed by default with a full session-log audit trail.

AI Agents | TypeScript · ai-safety · approval