fix· Workspaces
Allowlist requests no longer stop as prompt injection
Asking Sinatra to add a user to a feature gate is treated as ordinary work, not a suspected injection.
The inbound screen was reading "enable this for user X" as privilege escalation and killing the run. Real override and secret-exfil attempts still stop the run.
Update: in a reply, a flagged attempt is now usually refused on its own rather than stopping the run (a GitHub, Slack or API reply after the run went idle still stops the task); in issue text it still stops the run.