wp-requirements-to-goals

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). Phase 1 reads outsider-authored free text from requirements.md (and optional notes/) and then uses it to generate goal files that Codex /goal will read as context during runtime; this is an indirect prompt-injection path because the model ingests the outsider prose via the generated GOAL.md/VERIFY.md/tests/test_plan.md content.