Type: Risk acceptance
Subject: R-02
Decision requested: Accept the residual risk recorded for R-02 - Indirect prompt injection via document bodies and comment threads
Inherent / residual: High / Moderate
Control owner: InfoSec (tool permissions) + Google Workspace Admin (sharing review)
Context: Treatment: Reduce - residual remains permanently. What we can commit to: We can stop instructions hidden in a document or its comments from triggering an action without a person approving it first. What remains: The hidden text is still read and can still shape the answer. Externally shared documents and comment threads are the delivery route and we cannot inspect every one. Basis for acceptance: Yes - same acceptance as R-01.
No verification items specific to this connector.
Ruling:
Amendment or condition: