calibration-reconcile

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). The required runtime path reads manual-attribution.jsonl from the central store (read_manual_attribution), and that file is authored by humans other than the operating user (outsider free text/JSONL) which is ingested into the LLM context via the reconciler’s processing/logging pipeline.