pre-land-refuters

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required runtime workflow dispatches refuters that “read the change and derive the facts” from the PR/commit diff; that diff content is authored by outsiders (e.g., other contributors’ PR text/changes), which the refuter LLM ingests as readable code/patch context during the fresh-context review.