
Security News
/Company News
Securing the Financial Frontier: How Capital One Uses Socket for Open Source Security
Capital One is partnering with Socket to proactively secure its open source supply chain.
Best-of-N sampling with an LLM-as-a-Verifier judge for DeepSeek Harness: sample N candidates per model call, score them with fine-grained logprob verification, and stream back the tournament winner.
Best-of-N sampling with an LLM-as-a-Verifier judge for DeepSeek Harness — as one ordinary model route.
Pick the deepseek-turbo provider in your model selector and every model call samples N candidates in parallel, scores them with fine-grained logprob verification, and hands your agent the tournament winner. Faithful implementation of LLM-as-a-Verifier (Stanford Scaling Intelligence Lab): sampling 5 candidates with DeepSeek and ranking them with the same model lifted Terminal-Bench accuracy from 79% to 88% in the paper — outperforming closed frontier models at a fraction of the cost.
dsh plugin add dsh-turbo
That's it if you already use the official DeepSeek route: dsh-turbo reads the same DEEPSEEK_API_KEY credential (credentials service first, environment second). Otherwise:
export DEEPSEEK_API_KEY=sk-...
Restart dsh, open the model selector, choose DeepSeek Turbo → DeepSeek-V4-Flash-Vision-Exp (Turbo). Done — no other configuration exists between you and best-of-5.
Default models, in order:
| Model | Input | Notes |
|---|---|---|
deepseek-v4-flash-vision-exp | text + images | default; DeepSeek's multimodal model |
deepseek-v4-flash | text | |
deepseek-v4-pro | text |
Images flow end to end: candidates receive them as real multimodal input, and the verifier sees the same pixels when judging.
Every conversation model call (auxiliary calls like compaction/session titles pass straight through):
logprobs: true, top_logprobs: 20. The reward is the expectation over the score token's probability distribution, not the argmax — the paper's key signal (one logprob evaluation ≈ 16 discrete-judge votes) — normalized to [0, 1]. Scores decompose over three criteria (specification adherence / output match / error signals), each seeing the same standing ground-truth note, and can repeat K times.Verifier prompts share a byte-identical prefix (system + note + task context) across every pair of a step, and the candidate-pair message is byte-identical across that pair's criterion calls, so DeepSeek prefix caching absorbs most of the verification input cost.
The scoring and selection follow llm_verifier v0.2.0 (2026-08-14), including the details its own issue history produced: the score distribution is read at the last <score_A> occurrence (a model that quotes the output format mid-analysis must not shadow its verdict), whitespace-only tokens are skipped when locating the tag, a fused > prefix is stripped from score tokens, and an unreadable evaluation contributes a neutral 0.5 rather than dropping out and silently re-weighting the rest.
Two deliberate differences:
> into the letter token, so most alternatives there are unusable. On this provider integers carry more of the distribution the method depends on./turbo and the decision log report usableEvaluations, and a run with none is marked degraded instead of presented as a ranking.examples/vision-3d-game is the full end-to-end run
on a stock DSH install — a maze image pasted into the composer, and the agent
builds a first-person 3D dungeon crawler from what it saw, then converts it into
a Counter-Strike style FPS in a follow-up turn. Both games were written entirely
by the model; open them in a browser and play.

Across those two turns: 25 fan-out steps, 5 candidates each, zero degraded, 740 verifier calls, 19 M cached prompt tokens.
/turbo command/turbo — last decision (per-candidate mean preference, pivots, pair count, previews), how many evaluations fell back to neutral, and cumulative extra spend./turbo off / /turbo on — temporarily pass single calls through without switching models.Decision records also append to $DSH_HOME/dsh-turbo/decisions.jsonl for offline analysis.
Everything lives in the dsh-turbo: section of $DSH_HOME/settings.yaml (hot-reloaded):
dsh-turbo:
n: 5 # candidates per call; 1 = plain passthrough
repeats: 1 # K verifier repeats per pair and criterion
pivots: 2 # ring leaders anchoring the comparison round
criteria: coding # coding | general
temperatures: [0.2, 0.5, 0.8, 1.0, 1.2]
verifierModel: deepseek-v4-flash-vision-exp # default: the candidate model
verifierTemperature: 1
verifierMaxTokens: 2000
apiKeyEnv: DEEPSEEK_API_KEY
baseURL: https://api.deepseek.com # any OpenAI-compatible endpoint that returns logprobs (vLLM!)
decisionLog: true
Pointing baseURL at a vLLM (or any OpenAI-compatible, logprob-returning) server gives your self-hosted models the same best-of-N treatment.
Best-of-N is a deliberate trade: with defaults, one step costs ~5 candidate generations plus ~36 short verifier calls (most of whose input is prefix-cache hits). Responses arrive after all candidates and verification complete — the status line shows sampling/verifying progress while you wait. Budget option: n: 3, pivots: 1 roughly halves the extra spend.
/turbo and the status line appear only on surfaces that provide the commands / TUI status services; everything else works headless.MIT
FAQs
Best-of-N sampling with an LLM-as-a-Verifier judge for DeepSeek Harness: sample N candidates per model call, score them with fine-grained logprob verification, and stream back the tournament winner.
The npm package dsh-turbo receives a total of 17 weekly downloads. As such, dsh-turbo popularity was classified as not popular.
We found that dsh-turbo demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
/Company News
Capital One is partnering with Socket to proactively secure its open source supply chain.

Security News
Socket CTO Ahmad Nassri discusses how to keep AI agents from bypassing package blocks, limit credential access, and monitor their actions.

Security News
GPT-6 Astra tried to plant malicious code in simulated open source projects using fake GitHub accounts and deceptive PRs during an assigned CTF challenge.