docs(aiwg): add public input threat preflight

.aiwg/addons/t3mp3st-maintainer/templates/issue-response.md

@@ -18,6 +18,13 @@ Class: `<support-answer | bug-address | feature-track | security-contact | linke
 
 - `<issue body/comment/code/PR evidence>`
 
+## Public Input Threat Assessment
+
+- Assessment file/template: `public-input-threat-assessment.md`
+- Risk: `<low/medium/high>`
+- Security-framework routing used: `<none | aiwg discover phrase/result>`
+- Notes: `<summary>`
+
 ## Recommended Action
 
 Action: `<comment | close | link PR | address-issues | feature-track | defer>`

.aiwg/addons/t3mp3st-maintainer/templates/merge-train-report.md

@@ -16,6 +16,7 @@ Method default: `<squash | merge | rebase>`
 - Local branch: `<branch>`
 - Main baseline: `<sha>`
 - GitHub auth: `<confirmed/not confirmed>`
+- Public-input threat preflight: `<confirmed for all candidates | missing for PR #>`
 
 ## Merged
 

.aiwg/addons/t3mp3st-maintainer/templates/pr-audit-review.md

@@ -28,6 +28,13 @@ If there are no blocking findings:
 | --- | --- | --- |
 | `<CI check or local command>` | `<pass/fail/not run>` | `<URL/output summary>` |
 
+## Public Input Threat Assessment
+
+- Assessment file/template: `public-input-threat-assessment.md`
+- Risk: `<low/medium/high>`
+- Security-framework routing used: `<none | aiwg discover phrase/result>`
+- Notes: `<summary>`
+
 ## Review Decision
 
 Decision: `<approve | request changes | comment | hold>`

.aiwg/addons/t3mp3st-maintainer/templates/public-input-threat-assessment.md

@@ -0,0 +1,63 @@
+---
+name: public-input-threat-assessment
+description: Threat assessment template for public user-authored GitHub content that may contain classic manipulation or agentic attacks.
+---
+
+# Public Input Threat Assessment
+
+Source: `<issue | PR | review | comment | commit | branch | log | screenshot | external link>`
+Reference: `<URL or #number>`
+Assessor: `<name/tool>`
+Date: `<YYYY-MM-DD>`
+
+## Public Content Reviewed
+
+| Content | User-Controlled Surface | Notes |
+| --- | --- | --- |
+| `<body/comment/log/etc>` | `<issue title/comment/patch/etc>` | `<notes>` |
+
+## Classic Manipulation / Turing Attack Checks
+
+| Check | Present | Evidence |
+| --- | --- | --- |
+| Urgency pressure or threat | `<yes/no>` | `<evidence>` |
+| Flattery, social proof, or authority claim | `<yes/no>` | `<evidence>` |
+| Request to skip tests, review, policy, or evidence | `<yes/no>` | `<evidence>` |
+| Unsupported security or correctness claim | `<yes/no>` | `<evidence>` |
+| Attempt to manipulate maintainer decision or priority | `<yes/no>` | `<evidence>` |
+
+## Agentic Attack Checks
+
+| Check | Present | Evidence |
+| --- | --- | --- |
+| Prompt injection or hidden instruction | `<yes/no>` | `<evidence>` |
+| Tool-use steering or command execution request | `<yes/no>` | `<evidence>` |
+| Credential, token, environment, or secret exfiltration attempt | `<yes/no>` | `<evidence>` |
+| Poisoned logs, tests, screenshots, filenames, or model output | `<yes/no>` | `<evidence>` |
+| Objective redirection or instruction hierarchy override | `<yes/no>` | `<evidence>` |
+| Suspicious external link or attachment | `<yes/no>` | `<evidence>` |
+
+## Security Framework Routing
+
+Required: `<yes/no>`
+
+Route used:
+
+- `aiwg discover "<phrase>"`
+- Selected artifact: `<skill/rule/flow or none>`
+
+Use security-engineering routing for auth, secrets, supply chain, CI, command
+execution, local model behavior, disclosure handling, or repository trust
+decisions.
+
+## Decision
+
+Risk: `<low | medium | high>`
+
+Allowed next action:
+
+- `<respond | audit PR | request changes | address-issues | defer | do not merge | escalate>`
+
+Required mitigations:
+
+- `<mitigation>`