security(orchestration): gap descriptions from verify LLM flow into replan prompt verbatim #2240
Description
Second-order prompt injection risk: gap text from verification LLM flows directly into replan prompt. Add 500-char cap on gap descriptions before passing to replan().