09-lead-delivery-and-reporting

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Outsider-authored free text may be ingested at runtime via the Delivery Confirmation Gate, which records and validates client acknowledgment artifacts (e.g., “reply message ID/permalink or quoted text” from a substantive reply/“got it” message from a named client contact) that can originate from the client’s inbound channels.