@polygraphso/litmus 0.29.0

litmus-v13 — C-01 tool-output-injection false-positive recalibration.

Honest servers no longer flip to F on benign patterns that merely resemble injection. The C-01 static/output text scan now distinguishes real hijack attempts from ordinary documentation:

• angle-bracket placeholders in usage text (<tool>, <system|...>)
• data: / format examples (data:image/*;base64,…, XML/JSX samples)
• benign second-person prose in tool descriptions and returned docs
• U+200B zero-width doc artifacts — regraded MEDIUM, with keyword-evasion still caught HIGH via normalize-then-scan (ins<ZW>tructions de-obfuscates before the keyword pass)

Skills keep every invisible character HIGH (S-01 strict). True-positive detection is preserved — the evil / injecting / second-order fixtures still grade F.

methodologyVersion → litmus-v13 (grades can move, so older attestations coexist by string).

Ships #101 (fix) + #102 (release bump).