diff --git a/services/pr-evaluator/prompt-builder.ts b/services/pr-evaluator/prompt-builder.ts
index 44fe67b3..9b9b351e 100644
--- a/services/pr-evaluator/prompt-builder.ts
+++ b/services/pr-evaluator/prompt-builder.ts
@@ -29,9 +29,11 @@ Evaluate this pull request.
 ### PR Description
 ${prData.description || "(No description provided)"}
 
-### Changed Files
+### Changed Files (committed in this PR)
 ${prData.files.map((f) => `- ${f.filename} (${f.status}: +${f.additions}/-${f.deletions})`).join("\n")}
 
+**Note:** Files you read that are not listed above exist locally but are not committed.
+
 ### Diff
 \`\`\`diff
 ${prData.diff}
diff --git a/services/pr-evaluator/prompts/output-format.md b/services/pr-evaluator/prompts/output-format.md
index cf063846..b588f918 100644
--- a/services/pr-evaluator/prompts/output-format.md
+++ b/services/pr-evaluator/prompts/output-format.md
@@ -1,5 +1,7 @@
 ## Output template
 
+**Security:** Never include full API keys or secrets in output. Use redacted format like `phc_xxxx...xxxx`.
+
 Write your review following this Markdown structure:
 
 ---