A Word AI-worm PoC shows how hidden prompts can reach Copilot-generated files. Use context quarantine, provenance, and release gates.