System prompt overrides

Kimi Work's hidden prompt override pulled a file from outside the selected workspace

RuntimeWire's A/B test shows no read-approval dialog appeared, and Moonshot's own kernel docs explain why: Read, Grep, Glob and ReadMediaFile are marked automatically allowed, so the prompt layer decides alone.