> ## Documentation Index
> Fetch the complete documentation index at: https://docs.svrnos.com/llms.txt
> Use this file to discover all available pages before exploring further.

# GER-412 · Inherited-Filter Context Redaction

> A trusted component auto-loads configuration from co-located untrusted context (cloned repo, downloaded file, fetched dependency), and that configuration modifies what the AI or operator sees, evading both human and AI r…

export const Badge = ({children, tone = "default", title}) => {
  const tones = {
    default: "bg-neutral-100 text-neutral-700",
    green: "bg-green-100 text-green-900",
    amber: "bg-amber-100 text-amber-900",
    blue: "bg-blue-50 text-blue-900",
    gray: "bg-neutral-50 text-neutral-600"
  };
  return <span className={`inline-flex items-center px-2 py-0.5 text-xs font-mono uppercase tracking-wider rounded ${tones[tone] ?? tones.default}`} title={title}>
      {children}
    </span>;
};

<div className="flex flex-wrap gap-2 mb-8 mt-2">
  <Badge tone="green">Documented</Badge> <Badge>Tier 4xx</Badge> <Badge>Layer L2</Badge> <Badge tone="blue" title="SVRNOS-assigned code in an HTTP-unassigned slot">Namespace-Claim</Badge> <Badge tone="gray">Added v0.2</Badge>
</div>

*Operator / Platform Errors*

## Definition

A trusted component auto-loads configuration from co-located untrusted context (cloned repo, downloaded file, fetched dependency), and that configuration modifies what the AI or operator sees, evading both human and AI review of the modified context.

## Distinct from

* [**GER-403**](/ger/codes/403) — Config-load inflection point → this code. Component install inflection point → GER-403.
* [**GER-417**](/ger/codes/417) — Trust inherited from co-located untrusted source via config-load → this code. Rule communicated through informal channel without canonical authority binding → GER-417.
* [**GER-431**](/ger/codes/431) — Trusted component auto-loads untrusted config → this code. Vendor pushes update without validation gate → GER-431.

## Documented case

<Card title="CVE-2026-45792 — RTK (Rust Token Killer): unverified filter-config silently alters output shown to the LLM" href="https://github.com/advisories/GHSA-fvvm-949w-qj4w">
  advisory
</Card>

## Tags

`cve-2026-45792` · `l2` · `supply-chain`

### Cite

```
SVRNOS. (2026). GER-412: Inherited-Filter Context Redaction. Governance Error Register. https://docs.svrnos.com/ger/codes/412
```