poteto-mode

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In the required Orchestrate runtime, scripts/orch/orch.ts uses the store evidence files that can be user-supplied via orch inbox push --report <path> and then scripts/orch/store.ts reads those .tsv/gates.md/frontier.json text files (freeform cell fields) into memory to render status and drive gate logic.