Independent read-only acceptance layer: spawns a read-only verifier before each top-level turn closes and steers non-pass gaps back into the agent.
dsh plugin --profile web add github:EvilIrving/dsh-proof
View the source on GitHub