extract-controls

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In extract_controls.py, the extract-text subcommand ingests the outsider-provided inline --text argument and immediately runs regex/RapidFuzz candidate extraction plus optional catalog resolution before producing outputs (and the larger pipeline queues proof_jobs with requirement_text).