reconcile

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The reconcile runtime path inventories this session’s off-thread work and reads each off-thread item’s actual output (“task output, a subagent transcript, a monitor log, shell output”) as untrusted data, and those artifacts can include outsider-authored free text that could be injected into the action-verdict loop.