A Haystack pipeline can be perfectly wired and still unsafe.

The retriever returns documents.
The ranker ranks them.
The prompt builder formats them.
The generator answers.

Every component did its job.

But if untrusted text moved through the pipeline as ordinary context, the trust boundary was lost.

That is the problem this post is about.

Not...