Tom Boucher 95eda5845e fix(tests): allowlist execute-phase.md in prompt-injection scan (#1835) ...

execute-phase.md grew to ~51K chars after the code-review gate step
was added in #1630, tripping the 50K size heuristic in the injection
scanner. The limit is calibrated for user-supplied input — trusted
workflow source files that legitimately exceed it are allowlisted
individually, following the same pattern as discuss-phase.md.

Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-04-05 20:03:47 -04:00

13 KiB

Raw Blame History

View Raw