review-extraction

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In scripts/build_golden_slice_bundle.py, the runner extracts and embeds free-text fields from the PDF it is given (_extract_page() reads block.get("text") and table.get("text"/"markdown")) into the generated evidence bundle and the closure HTML (_render_evidence()/_build_closure_signoff() use el.get("text") for previews and element notes).