Daniel 6c7d687dd0 Prompt-injection wrap: remaining AI routes ... Applied the <UNTRUSTED_*> delimiter + INJECTION_GUARD pattern to: - src/routes/sickVisit.js (chief complaint, transcript, dictation, ROS, physical exam, diagnoses, style hints) - src/routes/wellVisit.js (SSHADESS answers + full well-visit context) - src/routes/chartReview.js (PMH + all visit content + labs) - src/routes/hospitalCourse.js (all notes/H&P/ED + clarification & update endpoints) - src/routes/milestones.js (narrative + summary) Each wraps patient-derived text in <UNTRUSTED_*>…</UNTRUSTED_*> tags and appends the INJECTION_GUARD system instruction that tells the model to treat wrapped content strictly as data. Operator- supplied `additionalInstructions` stays unwrapped (trusted).		2026-04-14 05:31:54 +02:00
..
db	Add node-pg-migrate for versioned schema changes + better mobile UA labels	2026-04-14 05:06:19 +02:00
middleware	Enforce server-side LLM model whitelist + scope idle timeout to writes	2026-04-14 05:15:55 +02:00
routes	Prompt-injection wrap: remaining AI routes	2026-04-14 05:31:54 +02:00
utils	Batch of security + scale fixes	2026-04-14 05:24:40 +02:00