dsh-dros-vajraclaw
top-celestial-company-ltd/dsh-dros-vajraclaw
Deterministic Runtime Execution Governance & Security Circuit-Breaker for DSH Agents
インストール
dsh plugin --profile web add github:top-celestial-company-ltd/dsh-dros-vajraclawREADME
⚡ DROS™ VajraClaw for DSH (DeepSeek Harness)
The Microsecond Execution Governance & Circuit-Breaker Standard for DSH Agents
English | 繁體中文說明 | 🌐 Official Website
The official Deterministic Runtime Execution Governance & Security Circuit-Breaker plugin for DSH (DeepSeek Harness) agents.
🎁 【DSH Community Launch Special: $49/yr (67% OFF) — Automatic +365 Days Stacking】
To celebrate our official debut on the DSH Community Marketplace, all Hacker-tier features (AST compiler, attack simulator, custom
Vajra.md) are 100% unlocked in the Free-Trial (up to 2 concurrent agents, 30 days).⚡ No need to wait until your trial ends! Purchasing now will automatically add +365 days on top of your remaining trial (giving you 395 full days of protection + unlocking 5 concurrent agents immediately).
🎟️ Use promo code at checkout:
DSH_VAJRACLAW_LAUNCH➔ $49 / yr (Regular $149/yr, limited to first 1,000 developers)!
📊 DROS Product Tiers & 6-Pillar Security Feature Matrix
💡 Free-Trial Notice: The default Community Edition runs in Free-Trial mode (Max 2 Concurrent Agents, 30-Day limit) with 100% full Hacker security features unlocked. Purchasing the Hacker license permanently removes time limits and unlocks 5 Concurrent Agents.
| Feature / 6-Pillar Dimension | 🟢 Hacker (DSH Edition) | 🔵 Startup | 🟣 Enterprise | 👑 Sovereign |
|---|---|---|---|---|
| Target Audience | Individual Devs / DSH Users | 10~50 Dev Teams | Enterprises / Listed Co. | Banking / Defense / Gov |
| Price (USD) | $49/yr (Special) ~ $149/yr | $799/yr | $7,990/yr (Base Fee) | Contact Sales |
| Machine UUID Limit | 1 UUID | 3 UUIDs | 15 UUIDs | Unlimited |
| Concurrent Agents | 5 Agents (2 in Free-Trial) | 30 Agents | 450 Agents | Unlimited (Swarm) |
| Pillar 1: Principal (Identity) | ✅ libdros-id SDK | ✅ 3-Tier PKI DIT | ✅ Cross-Domain BEC Issuance | ✅ Hardware Dongle |
| Pillar 2: Authorization (Deterministic) | ✅ Basic Scope Match | ✅ Zero-Heap Bitmaps | ✅ Custom Capability Vector | ✅ Multi-Dim Bitmap Matrix |
| Pillar 3: Tool Bound (Syscall Gate) | ✅ C-ABI Interception | ✅ 26.1μs In-Band Fuse | ✅ Sub-500ns Thread Panic | ✅ Hardware Physical Fusing |
| Pillar 4: Policy Gate (Dynamic Control) | ❌ (Requires Startup) | ✅ Dynamic PII Masking | ✅ HITL Multi-Sig + ZKP | ✅ Military Gate Matrix |
| Pillar 5: Audit Log (Non-Repudiation) | ✅ Basic JSON Chain | ✅ Ed25519 Signatures | ✅ SHA-256 Merkle Tree | ✅ Court-Admissible Proof |
| Pillar 6: Expiry/Revocation (<1μs) | ❌ Manual Restart | 🟡 15-min BEC Expiry | ✅ <1μs RCU Pointer Swap | ✅ Distributed Mesh Revoke |
| RFC-010 Open Passport Standard | ✅ Signing & Issuing | ✅ Multi-Role DIT Sign | ✅ GuardVM Validation | ✅ 3-Tier Sign Chain |
| Add-On Compliance Packages | ❌ (Requires Startup) | 💡 Eligible for Add-Ons | ⭐ Eligible for Add-Ons | ✅ Fully Included |
| Deployment Target | Local PC / Docker Gateway | VM / NAS Docker | K8s / GKE / Cluster | Air-Gapped / FPGA |
🌐 Official Platform & Documentation
For full interactive benchmarks, live attack demonstrations, enterprise compliance tools, and SDK guides, visit the official portal: 👉 https://dr-os.io
⚡ Features
- Microsecond Tool Interception: Evaluates all Agent Tool-Calls against deterministic compile-time policies (<1μs).
- Prompt Injection Defense: Stops jailbreaks and context contamination before unauthorized actions take place.
- Strict Fail-Closed: Physical fusing prevents unauthorized external execution.
- Zero-Friction Integration: Connects seamlessly with the DROS Hacker/Enterprise Gateway running on Docker.
🚀 Quick Start (30 Seconds)
Step 1: Start the DROS Docker Gateway
Run the official DROS Hacker Gateway container:
docker run -d -p 8080:8080 --name dros-gateway dros/hacker-gateway:v1.0.0
Step 2: Install the Plugin in DSH
dsh plugin --profile web add dsh-plugin-vajraclaw
Step 3: Run your DSH Agent
Your DSH Agents are now 100% governed by DROS execution policies! All malicious and out-of-boundary tool calls will be intercepted in under 1 microsecond.
⚙️ Configuration
In DSH Settings (or config.json):
gatewayUrl:http://localhost:8080(Default)strictFailClosed:true(Enforce safety fallback if Gateway is unreachable)licenseKey: Enter your Gumroad Hacker Key to unlock 5 concurrent agents.
📜 Academic Papers & Whitepapers
The architecture and patent boundaries of DROS are established in The DROS Academic Trilogy:
- DROS-6P: A Unified Deterministic Runtime Governance Architecture Closing the Six Fundamental Trust Boundaries of Enterprise AI Agents (DOI: 10.5281/zenodo.21808499)
- DROS 4-Layer: DROS 4-Layer Defense-in-Depth Architecture for Autonomous AI Workloads (DOI: 10.5281/zenodo.21755654)
- DROS-PGM: Runtime Attribution Framework: An External C-ABI and PKI-Based Zero-Trust Infrastructure for Non-Repudiable Execution Governance in Multi-Agent Systems
🏢 Enterprise Solutions & Custom Inquiries
Need cluster-wide governance, K8s mesh control planes, or HIPAA/FinRisk compliance packages? Explore enterprise plans at dr-os.io/pricing.
🏛️ Official Organization & Contact Information
- Company: Top-Celestial Company Ltd. (康宸園有限公司)
- Official Website: https://dr-os.io
- Customer Support & Business Inquiries: service@dr-os.io
- GitHub Organization: https://github.com/Top-Celestial-Company-Ltd
🇹🇼 繁體中文說明
專為 DeepSeek Harness (DSH) 生態打造的官方確定性運行期安全治理與工具調用熔斷外掛。
🎁 【DSH 開發者社群首發狂歡特惠：$49 美元 / 年（天數自動無縫疊加 +365 天）】
為致敬 DSH 開發者生態，DROS 官方提供 Free-Trial 滿血全功能體驗（支援 30 天 / 2 個並發 Agent，AST 編譯器、紅隊攻擊模擬器與自訂
Vajra.md零閹割完全開放！）。⚡ 完全不用等 30 天試用期結束！ 現在購買，系統會直接在您現有的試用期上疊加 +365 天（立即享有 395 天完整守護 + 當場解鎖 5 個並發 Agent 與工作站權限）！
🎟️ 結帳輸入專屬折扣碼：
DSH_VAJRACLAW_LAUNCH➔ 首發狂歡特惠價：$49 美元 / 年（原價 $149/年，限量前 1,000 名）！
📊 DROS 官方產品階梯與 6-Pillar 安全防禦規格對照表
💡 免費試用說明：外掛預設以 Free-Trial 模式（上限 2 個並發 Agent、30 天試用） 運作，且具備 100% 完整 Hacker 級安全防護功能。輸入 Hacker 授權碼後立即解鎖為 5 個並發 Agent 並移除天數限制。
| 安全功能 / 6-Pillar 機制維度 | 🟢 Hacker (DSH 外掛版) | 🔵 Startup | 🟣 Enterprise | 👑 Sovereign |
|---|---|---|---|---|
| 目標客戶 | 個人開發者 / DSH 用戶 | 10~50人新創團隊 | 中大型企業 / 上市公司 | 金融金控 / 國防 |
| 價格 (USD) | $49/年 (首發特惠) ~ $149/年 | $799/年 | $7,990/年 (基礎年約) | 專案諮詢 |
| 機器授權 (UUIDs) | 1 組 UUID | 3 組 UUIDs | 15 組 UUIDs | 無限制 |
| Concurrent Agents 上限 | 5 個 (免費版為 2 個) | 30 個 | 450 個 | 無限制 (Swarm) |
| Pillar 1：Principal 身份證明 | ✅ libdros-id SDK | ✅ 3-Tier PKI DIT | ✅ 跨域 BEC 憑證發放 | ✅ 硬體 Dongle 印記 |
| Pillar 2：Authorization 權限區隔 | ✅ 基礎 Scope 比對 | ✅ 零堆積 Bitmaps | ✅ 全自訂 Capability 向量 | ✅ 動態位元圖多維矩陣 |
| Pillar 3：Tool Bound 工具邊界 | ✅ C-ABI 基礎攔截 | ✅ 26.1μs 帶內熔斷 | ✅ Sub-500ns Thread Panic | ✅ 晶片硬體級物理熔斷 |
| Pillar 4：Policy Gate 三大門閥 | ❌ (升級 Startup) | ✅ 動態 PII 遮蔽 | ✅ HITL 雙簽 + ZKP-Lite | ✅ 軍規級門閥矩陣 |
| Pillar 5：Audit Log 稽核追溯 | ✅ 基礎 JSON 鏈 | ✅ Ed25519 數位簽章 | ✅ SHA-256 Merkle 雜湊鏈 | ✅ 不可否認性法院級憑證 |
| Pillar 6：Expiry/Revocation 秒撤 | ❌ 需手動重啟 | 🟡 15分鐘 BEC 過期 | ✅ <1μs RCU 原子指針切換 | ✅ 分散式秒級網格撤銷 |
| RFC-010 開放 Agent 護照格式 | ✅ 簽章與發行 | ✅ 多角色 DIT 簽署 | ✅ 企業 GuardVM 集中驗證 | ✅ 國防級 3-Tier 簽章鏈 |
| 開放彈性加購產業合規 Package | ❌ (升級 Startup) | 💡 開放彈性加購 | ⭐ 開放彈性加購 | ✅ 包含完整權限 |
| 部署載體 | Local PC / Docker 網關 | VM / NAS Docker | K8s / GKE / Cluster | Air-Gapped / FPGA |
⚡ 核心功能特性
- 微秒級工具調用攔截：在 Agent 執行任何 Tool 前進行 $\mathcal{O}(1)$ 常數時間點陣圖校驗（延遲 < 1μs）。
- 提示注入與上下文污染防禦：在不可信任的輸入觸發實際操作前實施帶內阻斷。
- 鋼性預設拒絕 (Strict Fail-Closed)：一旦超出安全邊界立即進行物理熔斷，絕不妥協。
- 零摩擦極速整合：透過 Docker 容器化網關與 DSH 實現秒級無縫對接。
🚀 30 秒極速上手
步驟 1：啟動 DROS Docker 網關
docker run -d -p 8080:8080 --name dros-gateway dros/hacker-gateway:v1.0.0
步驟 2：在 DSH 中安裝外掛
dsh plugin --profile web add dsh-plugin-vajraclaw
步驟 3：開始安全運行您的 DSH Agent
您的 DSH Agent 現在 100% 受 DROS 執行策略保護！所有越權操作將在 1 微秒內被精準阻斷。
⚙️ 外掛設定選項
在 DSH 設定介面中：
gatewayUrl:http://localhost:8080(預設網關位置)strictFailClosed:true(若網關斷線強制開啟安全防護)licenseKey: 輸入您的 Gumroad 授權碼即可解鎖 5 個並發 Agent。
📜 學術論文與技術白皮書
本系統之架構設計與專利防線奠基於 DROS 論文三部曲 (The DROS Academic Trilogy)：
- DROS-6P: A Unified Deterministic Runtime Governance Architecture Closing the Six Fundamental Trust Boundaries of Enterprise AI Agents (DOI: 10.5281/zenodo.21808499)
- DROS 4-Layer: DROS 4-Layer Defense-in-Depth Architecture for Autonomous AI Workloads (DOI: 10.5281/zenodo.21755654)
- DROS-PGM: Runtime Attribution Framework: An External C-ABI and PKI-Based Zero-Trust Infrastructure for Non-Repudiable Execution Governance in Multi-Agent Systems
🏛️ 官方發行組織與聯繫資訊 (Official Contact)
- 發行主體：Top-Celestial Company Ltd. (康宸園有限公司)
- 官方網站：https://dr-os.io
- 客戶服務與商務諮詢：service@dr-os.io
- GitHub 官方組織：https://github.com/Top-Celestial-Company-Ltd
📄 專利與法律聲明
專利聲明： DROS 執行治理與安全技術已申請美國臨時專利保護（U.S. Provisional Patent Application No. 64/111,973，Patent Pending）。