roadmap

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required workflow reads outsider-authored thread inputs (seed.md, decisions.md, and optional proposal.md) from docs/threads/<...>/ and uses their prose to drive the decomposition, which is then fed into the agent’s LLM context for authoring roadmap.md/roadmap-feedback.md.