ship-now

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow reads insider-authored GitHub PR review summaries and inline comments during its admin-merge safety step (“Read every current human and bot review summary and every top-level inline comment”), which can include outsider-submitted free text, before deciding whether to merge.