spec.ParseSteps passes a spec's step titles through raw, and the build loop stores and echoes them (brief, state.json, implement status --json, pull-request titles), so a spec whose step title carries a control or bidi rune puts it on those surfaces.

spec.ParseSteps passes a spec's step titles through raw, and the build loop stores and echoes them (brief, state.json, implement status --json, pull-request titles), so a spec whose step title carries a control or bidi rune puts it on those surfaces.

Security scope (abcd-fixes-what-it-adds): the route does not exist without abcd. The text is echoed by abcd's own --json surface, so abcd added the route and fixes it at the boundary the text enters by; a fix changes nothing about how the repository works.