audit-onboarding-proposal

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In the Evidence-capsule route, the runtime reads an outsider-authored transcript file/its last assistant message from a raw-session.jsonl path (and potentially machine tool output) and parses free text (including JSON capsule, patch diffs, and claim lines) to extract and validate evidence.