dsh-compliance-doc: Turning DeepSeek Harness Check Results into Deliverable Documents

What Does It Do?

Compliance Doc is a DSH plugin for DeepSeek Harness that turns a local static security check report into three deliverable documents: a self-check spreadsheet, a remediation note, and a compliance statement. It solves the problem of scan results scrolling past in the terminal and having to be copied into Excel by hand, so results produced inside the harness become consistent, ready-to-hand-over files in one pass. Maintained by feely0208 under the MIT license, it is the delivery step of the DeepWhale security guard series.

Core Features

• Generates three documents at once: the self-check table is CSV with a UTF-8 BOM so Excel opens it on double-click, while the remediation note and compliance statement are Markdown aimed at executors, managers, clients, and archival.
• Accepts two input shapes: a standard or suite scan report, or a before/after fix-verification report that it turns into a remediation note.
• Keeps wording within bounds: all three files carry the same disclaimer, never claim "compliant" or "guaranteed to pass", and state that no findings does not mean no problems.
• Supports organization name, check date, and a protection-level document profile that only changes document organization, not the rule set.
• Exits with code 2 on missing input, broken JSON, or wrong fields instead of fabricating a document that looks normal.

How to Use This Plugin?

After enabling it in DSH, point it at an existing scan report and an output directory to produce the three files; the output directory is created automatically if missing. For a specific organization, add the organization name, check date, and document profile. When paired with the fix-verification plugin, first produce the verification report and let this plugin turn it into a remediation note. Treat the generated compliance statement as a check record rather than a certificate, and keep its disclaimer intact.