Primary evidence is sensitive credential exposure in CI workflow .github/workflows/validation.yml (hardcoded Basic auth and setup password) and non-destructive integration actions (starting a local service and HTTP POST setup). No readable evidence supports prompt injection, obfuscation/evasion, supply-chain malware, or destructive operations.