@techreport{u65v3w,
  author = {Gilly, Travis},
  title = {{Reviewed for Quality and Security: Advertising Injection Through a Verified Connector, Trust Laundering, and the Limits of Directory Verification}},
  institution = {Real Safety AI Foundation},
  type = {Working Paper},
  year = {2026},
  month = jul,
  note = {Version 5},
  url = {https://realsafetyai.org/research/u65v3w/},
  keywords = {function return injection, rug pull, trust laundering, indirect prompt injection, Model Context Protocol, connector verification, dark patterns, deceptive design, native advertising, persuasion knowledge, trust marks, credence goods, signaling theory, attention economy, Federal Trade Commission, platform accountability, AI governance}
}