DeepSeek Harness pushes plugin boundaries down to the entire runtime: models, tools, skills, sessions, sandbox, storage, Agent Loop, scheduling, and UI are all composed of plugins. Supporting this architecture is the Cordis plugin system, which only handles plugin loading, unloading, and dependency relationships. Specific Agent capabilities are provided by different plugins, which collaborate via services and events.
Tool calls are broken into an extensible pipeline: before execution, they pass through hooks, approval, permission checks, sandbox, and timeout control; after execution, results can be rewritten, recorded, and rendered in the UI. In PTC mode, code and its sub-calls also go through this pipeline, unable to bypass approval and sandbox.
The four run modes (Standard, PTC, Minimal, Creative) are based on the same foundation, differing only in the default set of loaded plugins. Creative mode allows the Agent to inspect the runtime, experiment with Cordis plugins in memory, and combine new modes, making configuration itself an object the Agent can operate on.