cawplan-qa-commit

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow ingests outsider-authored free text indirectly via cawplan session collect --mode qa, which parses explicit human-input content for sessions (stored in qa-daily-<YYYY-MM-DD>.json as human_inputs[].content) before assignment/review/upload.