Type: Policy & awareness
Subject: User awareness / training
Decision requested: Accept this user awareness / training item and assign an owner and delivery route
Inherent / residual: n/a
Control owner: Pending assignment
Context: User Awareness/Training: User awareness training on indirect prompt injection - what it looks like in a document or comment thread, and why an agent summary drawn from shared content is not authoritative. Attaches to: read_file_content. Delivered by policy or training, not by entering text into an instruction field. Not a control - unevidenced.
Ruling:
Amendment or condition: