OMV Audit Desk (dsh-omv)

An evidence-first vulnerability audit workbench for DeepSeek Harness, powered by the public oh-my-vul API.

中文文档 · Architecture · DSH integration guide

<p align="center">_{Full audit desk overview: workspace summary, findings, reproduction, evidence graph, and PoC lab.}</p>

OMV Audit Desk is the product name; dsh-omv remains the package id for upgrade compatibility. It is a dual-face, native DSH bundle:

• a Node plugin joins DSH web-server, tool, command, system-prompt, and workspace-registry services;
• a browser client contributes a conversation view, session status, composer context, command rows, settings section, and workspace launcher;
• cordis.patch.yml installs both faces into a DSH Web profile.

Features

• Evidence-maturity dashboard with five contextual dimensions instead of a single completion percentage
• Candidate, confirmed, blocked, and archived finding ledger
• source → sink → guard evidence-chain inspection
• Derived Audit Loop stages, persistent Finding-to-Session links, workflow history, and Evidence diffs
• One-click Agent workflows for audit, reproduction, deduplication, adversarial review, reporting, and disclosure
• Doctor issues, review verdicts, open questions, and exact next actions without circular score deductions
• Durable Campaign Runner with bounded concurrency, one native DSH forked session per lane, pause/resume/cancel/retry, and restart recovery
• Provenance-aware Evidence Graph, stage-aware report conditions, and structured reproduction runs
• Closed-loop PoC laboratory: editable drafts, explicit approval, Docker isolation, /output/result.json, artifact hashes, provenance, and manual Evidence adoption
• Dedicated quality center, reproduction lab, dedup intelligence, report-readiness signals, and Campaign Graph
• DSH-native visual system that uses the host background layers, borders, typography, and alias colors directly, with calm hierarchy, sticky workbench chrome, and responsive mobile breakpoints
• Campaign outcomes distinguish completed work from blocked lanes that still need attention
• Campaign compatibility diagnostics isolate malformed YAML, normalize common registry aliases, and repair derived metadata from the workbench
• Workspace-wide search, recent activity feed, and native DSH Job status with contextual repair-and-retry
• SSE workspace synchronization with polling fallback
• Recent workspace activity surfaced on the overview page
• Candidate creation, validation, reproduction scaffolding, promotion, and restore actions
• 29 model tools covering workspace quality, DSH lifecycle diagnostics, Finding, workflow, Campaign Runtime, evidence provenance, reproduction, PoC isolation, dedup, and search
• 19 durable /omv* commands, including omv-dedup and the Campaign Runtime set
• Automatic binding to the current DSH session workspace
• Native tool presentation, including an OMV-keyed tool.call.toolview card with expandable arguments/results and trajectory inspection, plus an evidence-first Agent system-prompt section
• Central cooperative cancellation guards on every native OMV tool invocation
• Native omv Cordis service for other plugins, lifecycle diagnostics via omv_runtime_status, and typed dsh-omv/tool-result events
• User preference persistence: uses the native dsh-omv settings namespace

…