Access gate for AI coding harnesses (DSH plugin + Claude Code hook): per-directory deny/read/full, roster groups, audit log, model-facing tools with owner-approved widening.

Branch from any answer and keep branching at any depth. Recursively isolated follow-ups that leave the main DSH task untouched.