Output-leak scanner triggered 3 times in the last 24h on RAG answers. Rewriter is leaking internal node IDs in clarification flows when the user types short queries. Need to update RAG_OUTPUT_LEAK_SCAN_STRICT regex and add unit coverage for prompt corpora.