structured signal from user reviews, support tickets, bug reports, meeting notes, and app store ratings enters the agent's context pool. The focus is *signal quality*: bug reports enriched with environment / version / reproduction; meeting notes processed with participant / topic metadata; reviews classified by feature area. A raw "it's broken" note is noise; a structured repro is focus. Ingestion is the last boundary before external content becomes persistent agent context; both instruction-shaped content (`PL4-prompt-injection-defence`) and personal information (`PL4-pii-masking`) are sanitised here, not downstream. (Automation of the ingestion loop itself is scored in `PL5-signal-driven-tasks`.)