decision-log

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In scripts/decision_log.py, the runtime loads and ingests Markdown text from all ADR files in the configurable decisions_dir (via load_decisions() → parse_decision() → read_text()), so outsider-authored free text present in those files can be searched and surfaced by commands like list, search, timeline, and due-review without selecting a specific item first.