attribution

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). Pillar A interpretation/reconciliation ingests only the user’s own free-text question (e.g., “Google/Meta says X but GA says Y … my dashboards disagree”) and the workflow does not describe reading outsider-authored feed/inbox/ticket content at runtime without selecting a specific item.