chore(aiwg): adopt shared BT6 maintainer workflow (#148)

* docs(policy): allow low-impact contributor courtesy cleanup

* chore(aiwg): migrate to shared BT6 maintainer plugin

* chore: reconcile delivery validation

.aiwg/plugins/bt6-maintainer/payload/templates/bt6-public-input-threat-assessment.md

@@ -0,0 +1,69 @@
+---
+name: bt6-public-input-threat-assessment
+description: Threat assessment for public or externally sourced tracker, code, log, corpus, research, evidence, and generated content.
+---
+
+# BT6 Public / External Input Threat Assessment
+
+Repository: `<canonical repository>`
+Source type: `<issue | PR | review | comment | commit | branch | patch | log | test | corpus | research source | screenshot | attachment | generated output | link>`
+Reference: `<URL, hash, path, or tracker key>`
+Assessor: `<name/tool>`
+Date: `<YYYY-MM-DD>`
+
+## Content Reviewed
+
+| Content | User/External-controlled Surface | Handling Notes |
+| --- | --- | --- |
+| `<body/log/source/etc>` | `<surface>` | `<quoted only / parsed / not executed / redacted>` |
+
+## Manipulation Checks
+
+| Check | Present | Evidence |
+| --- | --- | --- |
+| Urgency, threat, flattery, social proof, or authority pressure | `<yes/no>` | `<evidence>` |
+| Request to skip tests, review, policy, scope, or evidence | `<yes/no>` | `<evidence>` |
+| Unsupported correctness, security, research, or priority claim | `<yes/no>` | `<evidence>` |
+| Attempt to manipulate maintainer decision or issue priority | `<yes/no>` | `<evidence>` |
+| Citation laundering, fabricated source, or provenance ambiguity | `<yes/no>` | `<evidence>` |
+
+## Agentic / Tool Attack Checks
+
+| Check | Present | Evidence |
+| --- | --- | --- |
+| Prompt injection, hidden instruction, or hierarchy override | `<yes/no>` | `<evidence>` |
+| Tool-use steering or command execution request | `<yes/no>` | `<evidence>` |
+| Credential, token, environment, private-data, or secret request | `<yes/no>` | `<evidence>` |
+| Poisoned logs, tests, filenames, documents, corpora, screenshots, or model output | `<yes/no>` | `<evidence>` |
+| Malicious parser/input payload or traversal/symlink/archive behavior | `<yes/no>` | `<evidence>` |
+| Objective redirection or repository/tracker substitution | `<yes/no>` | `<evidence>` |
+| Suspicious external link, attachment, package, or source acquisition path | `<yes/no>` | `<evidence>` |
+
+## Research Integrity Checks
+
+| Check | Present | Evidence |
+| --- | --- | --- |
+| Source identity/license cannot be established | `<yes/no>` | `<evidence>` |
+| Citation, timestamp, locator, or hash is unverifiable | `<yes/no>` | `<evidence>` |
+| Source text is presented as instruction rather than data | `<yes/no>` | `<evidence>` |
+| Generated inference is presented as source evidence | `<yes/no>` | `<evidence>` |
+
+## Security Routing
+
+Required: `<yes/no>`
+
+- Discovery query: `aiwg discover "<specific decision>"`
+- Selected guidance: `<skill/rule/flow or none>`
+- Sensitive details moved to approved private channel: `<yes/no/n-a>`
+
+## Decision
+
+Risk: `<low | medium | high>`
+
+Allowed next action:
+
+- `<continue read-only | respond | request safe evidence | audit | implement | defer | do not merge | security escalate>`
+
+Required mitigations:
+
+- `<mitigation>`