diff --git a/loopx/control_plane/testing/cli_output_budget.py b/loopx/control_plane/testing/cli_output_budget.py
index 27527f17f5..2d136dca81 100644
--- a/loopx/control_plane/testing/cli_output_budget.py
+++ b/loopx/control_plane/testing/cli_output_budget.py
@@ -702,6 +702,15 @@ class CliOutputCommandClassification:
         surface_id=None,
         rationale="interactive local dashboard launched explicitly by the operator",
     ),
+    CliOutputCommandClassification(
+        command_id="dsh-launch",
+        qualification="explicit_cold_path_exception",
+        surface_id=None,
+        rationale=(
+            "explicit host launcher invoked on demand; the provider credential "
+            "reaches only the child environment"
+        ),
+    ),
     CliOutputCommandClassification(
         command_id="diagnose",
         qualification="qualified_default",
diff --git a/loopx/help_surface.py b/loopx/help_surface.py
index e11583491a..cb177397e6 100644
--- a/loopx/help_surface.py
+++ b/loopx/help_surface.py
@@ -82,6 +82,13 @@ def register_command_reference(subparsers: argparse._SubParsersAction) -> None:
                 "command": "loopx dashboard",
                 "purpose": "Start the local dashboard, status service, and Agent Chat service with one command.",
             },
+            {
+                "command": "loopx dsh-launch [dsh args...]",
+                "purpose": (
+                    "Launch DeepSeek Harness with this machine's stored provider "
+                    "credential and no secret in argv or output."
+                ),
+            },
             {
                 "command": "loopx chat --goal-id <goal-id>",
                 "purpose": "Open Goal Studio, ask the read-only Agent for a bounded Todo, and approve its preview before writeback.",
diff --git a/man/loopx.1 b/man/loopx.1
index be781e1333..610cf98e43 100644
--- a/man/loopx.1
+++ b/man/loopx.1
@@ -66,6 +66,9 @@ Show goals, gates, attention queue, and next action.
 \fBloopx dashboard\fR
 Start the local dashboard, status service, and Agent Chat service with one command.
 .TP
+\fBloopx dsh\-launch [dsh args...]\fR
+Launch DeepSeek Harness with this machine's stored provider credential and no secret in argv or output.
+.TP
 \fBloopx chat \-\-goal\-id <goal\-id>\fR
 Open Goal Studio, ask the read\-only Agent for a bounded Todo, and approve its preview before writeback.
 .TP