Claude Code context contamination: exfiltration-shaped instructions appeared in model context without source

Over 3 consecutive days, content not present in saved transcripts repeatedly appeared in the model context across 4 sessions, steering toward data exfiltration. Model refused each time. 6+ related open issues reported. Systemic bridge-session pipeline issue suspected.