pipa-retrospective

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Required workflow reads “status history and closure artifacts, incidents/risks/decision logs, then retro notes and stakeholder feedback,” i.e., it ingests outsider-authored free text from user-facing operational records (e.g., tickets/incidents/notes) that users can submit into the monitored systems without first selecting a specific trusted item.