dsh-break-glass-settlement-proof

Offline, deterministic evidence for one narrow question: does the supplied emergency-access session close within its declared lifetime, contain only allowlisted action/resource receipts, and revoke every declared grant before a fresh closure observation?

The same headless core is exposed as a DSH bundle, standalone MCP stdio server, JavaScript API and CLI. Reports are redacted, content-addressed and verified after writing.

Complementary boundary

Microsoft recommends limiting emergency access to true break-glass scenarios, monitoring every use, and using it only for the necessary amount of time. This plugin verifies a supplied settlement; it is not an identity provider or privileged-access manager.

• dsh-principal-binding-proof verifies which principal an evidence chain binds.
• dsh-policy-waiver-proof verifies why a policy exception is allowed.
• dsh-audit-bundle packages audit evidence.
• This plugin checks activation, bounded allowlisted actions, termination, declared grant revocation and fresh closure as one supplied session.

It never grants, activates, approves or revokes access; authenticates receipts; queries live identity infrastructure; or proves there were no undeclared actions or grants. residualGrantCount: 0 is only a claim in the provided closure.

Checks

• request, activation, termination, expiry and closure chronology;
• maximum session and expiry duration;
• contiguous ordered action receipts within the active interval;
• explicit action and resource allowlists;
• common session and principal binding across actions, grants and closure;
• every declared grant has a non-zero revocation receipt and valid grant/revoke times;
• supplied residual grant count, observer diversity and evidence freshness;
• secret/raw rejection, workspace confinement, symlink defense and content-addressed read-back.

Use

npm test
npm run check
node bin/dsh-break-glass-settlement-proof.mjs inspect examples/settled.json
node bin/dsh-break-glass-settlement-proof.mjs verify examples/settled.json

dsh plugin --profile <profile> add /absolute/path/to/dsh-break-glass-settlement-proof
dsh plugin --profile <profile> add github:dongsheng123132/dsh-break-glass-settlement-proof#<commit>

DSH tools are dsh_break_glass_inspect and dsh_break_glass_verify. MCP tools are break_glass_inspect and break_glass_verify.

See examples/settled.json. Only public IDs, timestamps, counts and SHA-256 bindings belong in a manifest. Never put credentials, account names, tokens, raw audit logs or business text in it.

References: Microsoft Entra emergency access accounts, security operations for privileged accounts, secure access practices.