version-release

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required runtime path uses git-derived commit subjects and authors (e.g., references/release-notes-style.md computing release_prs.txt from git log over a selected PR/branch range), where those commit subjects and author display names can be authored by outsiders in merged PRs, so the LLM ingests that outsider-authored free text at runtime.