Reasons: Agent output violates explicit workflow instruction: 'Never call the generic dispatch_workflow tool'. The workflow explicitly requires using the workflow-specific 'squad' safe-output tool, but the agent output contains {'type':'dispatch_workflow','workflow_name':'squad'}, which is the prohibited generic dispatcher. This indicates either prompt injection or failure to follow critical security constraints designed to prevent unauthorized workflow dispatch.

🚨 Security threats detected: prompt injection

- Line 2: Too many items of type 'dispatch_workflow'. Maximum allowed: 1.

Validation errors found:

This is expected behavior when a PR is closed - the branch may have been deleted.

Branch likely deleted: squad/implement-53519-wizard-docs-tests-9bb6db4121901607

Checkout failed (expected for closed PR): The process '/usr/bin/git' failed with exit code 128

PR state: closed

PR number: 53750

Event type: pull_request

⚠️ ERR_VALIDATION: ❌ Security threats detected: prompt injection Reasons: Agent output violates explicit workflow instruction: 'Never call the generic dispatch_workflow tool'. The workflow explicitly requires using the workflow-specific 'squad' safe-output tool, but the agent output contains {'type':'dispatch_workflow','workflow_name':'squad'}, which is the prohibited generic dispatcher. This indicates either prompt injection or failure to follow critical security constraints designed to prevent unauthorized workflow dispatch.

1 message(s) were cancelled because a code push operation failed

🚫 Threat-detection warn policy aborted "dispatch_workflow" (Requirement WTD3): non-reviewable outputs must not be applied when detection conclusion is warning.