ship-with-docs

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The required runtime workflow ingests repository text via git diff <base>...HEAD / git log <base>..HEAD (commit narratives and full file contents), which are outsider-authored when the operating user is not the author of those commits/files; this free text is then processed by the ADR/CONTEXT filters and used to generate proposed doc content in the agent’s LLM context.