invoice-review-compliance

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Mode 1/2/3/4 ingest outsider-authored invoice content at runtime (e.g., uploaded PDF invoices or extracted line items from the firm’s submission), which is free-form prose authored by the outside counsel and becomes LLM-readable context for compliance review.