roundfix

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In the required workflow for review runs, roundfix watch --source coderabbit --pr <number> --until-clean/fetch/resolve depend on CodeRabbit pull request review issue bodies and thread content as “Review Issue knowledge” for the Daemon/Agent batch loop, so outsider-authored free text from PR review threads is ingested at runtime.