promptfoo-evaluation

The fragment shows a safety gate that reported concrete PII and cross-customer assertion failures while still returning a successful job and green merge check. This is a significant safety-gate effectiveness concern, but the omitted Promptfoo configuration prevents determining whether it is caused by configuration, reporting, or intentional bypass. No direct malware or exfiltration is visible. The workflow also has exposure and reproducibility risks from running pull-request-controlled content with secrets available and using an unpinned npx invocation.