Skill: Annotation/Label Namespace Abuse
- Generic loops over
obj.Annotationsthat copy, forward, or echo values — these allow tenant injection into the reservedkueue.x-k8s.io/namespace and leak operator-set values across boundaries. Forwarding between CRs must go through an explicit allowlist.