handover

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). The required workflow is to read existing doctrine artifacts (e.g., state/.../phases/phase-NN.md and notes.md) authored by others and then embed summaries/pointers into the new handover.md, so outsider-authored free text can flow into the LLM context via those read-and-rewrite steps.