A host allowlist on DeepSeek Harness web_fetch and web_search, enforced at connect time
dsh plugin --profile web add dsh-netguard
View the source on GitHub