resonate-human-in-the-loop-pattern-go

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow side ingests only workflow inputs (e.g., ReviewRequest) and then parks on f.Await(&decision), while outsider-authored free text enters only indirectly through the external settler payload (--data / HTTP body / PromiseSettle value) targeting this specific promise ID.