converge

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required runtime workflow is ao converge, which dispatches judge legs via ao codex dispatch / codex-approval and ingests the judges’ verdicts and evidence (outsider-authored free text from other agents/panes) into the orchestrating agent’s LLM context for the next FIX round.