per-tenant-database

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In the “Database per Tenant” runtime path, the tenant id is derived from a client-supplied free-text company picker and then used by the actor (via the tenant key) to seed/read tenant data, meaning outsider-authored text can directly influence what the agent/workflow reads and operates on at connect/state time.