{
  "outcome": "quarantine",
  "threat": "llm-addressed-instruction",
  "why": "document body contains instructions addressed to the processing model; content is data, never instructions (T02 guardrail)"
}