ort-release-notes

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow reads release-note primary inputs from first-party generated contributor artifacts in resolved_output_dir/detail.csv/logs.txt produced by tools/python/compile_contributors.py, which in turn compiles from commit history and PR metadata, so it does not ingest arbitrary outsider-authored free text directly via a monitored queue/feed without first selecting/deriving specific internal artifacts.