Model Output Is Untrusted Input Most prompt-safety advice watches the request leaving your laptop, and almost none of it watches the reply that comes back. That asymmetry is where free-tier experiments quietly turn into incidents, because the return leg is the one carrying executable text. When a model reads your README, a failing test log, or a stranger's issue comment, those bytes enter its context and can steer what it writes next. If the same machine then applies that writing using yo...