resonate-human-in-the-loop-pattern-typescript

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime workflow awaits externally resolved HITL promise decisions, and the included Express webhook route reads the human-supplied :promiseId and action query string to construct decision and resolve the promise, making the flow susceptible to outsider-authored free text influencing what the workflow later processes.