align

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The $align runtime routes reviewer text into WebGPT via $ask and into external research via $dogpile, but the only outsider-authored free text that could be ingested is the browser-extracted/page/oracle content produced during those explicitly-driven research steps, not arbitrary queues/feeds without an explicit fetch/search trigger.