Day 11 — Injection demo + telemetry

The goal

Prove the guardrails on the actual deployed system, not just in CI: run a live prompt-injection attempt against the deployed widget and show it refusing or resisting, measure the block rate on a small adversarial set (never claiming immunity, only a measured reduction), replace the Day-1 rate-limit stub with the real limiter, and add basic widget telemetry. This day is also the buffer if an earlier day’s non-negotiable slips.

This day has not started yet. Once it lands, this page will be rewritten in place with the real story, proof, and architecture snapshot, sourced from the project’s build log.