Type: Estate-level
Subject: Estate-level
Decision requested: Accept that indirect prompt injection cannot be prevented, only limited in consequence
Inherent / residual: Critical / High
Control owner: InfoSec
Context: Approval gating limits what an injection can cause. The text is still read, and an injection that only distorts a summary triggers no tool call and no approval prompt. Nothing detects that case.
Risks: R-01 [High inherent / Moderate residual] Indirect prompt injection via externally-authored calendar content | R-02 [High inherent / Moderate residual] Indirect prompt injection via document bodies and comment threads | R-16 [High inherent / Moderate residual] Email-borne indirect prompt injection
No verification items specific to this connector.
Ruling:
Amendment or condition: