resolve-pending-decisions

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The required workflow reads bundle routing headers and then loads the selected bundle’s full body from docs/threads/<...>/ .pending-decisions/, which are outsider-authored free text if those pending-decision bundles were produced by someone other than the operating user.