Execution-time drift firewall for long-running DeepSeek Harness agents. Real-Harness tests: unsafe stale mutations 12/12 native -> 0/12; valid controls 7/7 both; post-SIGKILL unsafe continuation 2/2 -> 0/2.
dsh plugin --profile web add github:1052326311/dsh-plan-lattice#path:eval/pilots/driver/long-system-native-wrapper