The old code at line 917 applied prompt::sanitize_scorer_input(&finding.path) when constructing scorer inputs; that call was deleted in this diff. The new code at line 923 builds the query directly from finding.path, finding.title, and finding.body with no visible sanitization. Finding fields originate from LLM output and are untrusted; dropping sanitization could let control characters or malformed content reach the scorer query. Confirm whether sanitization was relocated or is now absent, and if absent, re-apply sanitize_scorer_input to each field before formatting the query.