Remove unnecessary output restrictions and simplify report tests

internal/framework/llm/runtime.go

@@ -4,11 +4,13 @@ import (
 	"context"
 	"errors"
 	"fmt"
+	"io/fs"
 	"net/http"
 	"os"
 	"path/filepath"
 	"sort"
 	"strings"
+	"sync"
 	"sync/atomic"
 
 	"gitea.maximumdirect.net/eric/audita/internal/core/config"
@@ -21,10 +23,12 @@ import (
 // Runtime owns one PromptKit engine and the validated selections for both roles.
 // The same engine is shared by the role-bound clients during processing.
 type Runtime struct {
-	Config     config.Config
-	Engine     *pk.Engine
-	Profiles   map[string]pk.ProfileInspection
-	nextCallID atomic.Uint64
+	Config   config.Config
+	Engine   *pk.Engine
+	Profiles map[string]pk.ProfileInspection
+	// ProfilePaths contains filesystem sources actually read by PromptKit.
+	ProfilePaths []string
+	nextCallID   atomic.Uint64
 }
 
 // AssetError indicates a broken embedded prompt or schema rather than an
@@ -39,10 +43,11 @@ func NewRuntime(ctx context.Context, c config.Config, mainPath string, client *h
 	if !filepath.IsAbs(profileDir) {
 		profileDir = filepath.Join(filepath.Dir(mainPath), profileDir)
 	}
+	profileFS := &profileSourceFS{FS: os.DirFS(profileDir), paths: make(map[string]struct{})}
 	options := []pk.Option{
 		pk.WithPromptFS(prompts.Filesystem(), prompts.AssetRoot),
 		pk.WithSchemaFS(responseschema.Filesystem(), responseschema.AssetRoot),
-		pk.WithProfileFS(os.DirFS(profileDir), "."),
+		pk.WithProfileFS(profileFS, "."),
 	}
 	ids := make([]string, 0, len(c.Backends))
 	for id := range c.Backends {
@@ -85,6 +90,12 @@ func NewRuntime(ctx context.Context, c config.Config, mainPath string, client *h
 		}
 		runtime.Profiles[selection.role] = *profile
 	}
+	profileFS.mu.Lock()
+	for name := range profileFS.paths {
+		runtime.ProfilePaths = append(runtime.ProfilePaths, filepath.Join(profileDir, filepath.FromSlash(name)))
+	}
+	profileFS.mu.Unlock()
+	sort.Strings(runtime.ProfilePaths)
 	return runtime, nil
 }
 
@@ -98,3 +109,21 @@ func RedactError(err error, c config.Config) string {
 	}
 	return redaction.New(ConfiguredSecrets(&c)).String(err.Error())
 }
+
+// Record successful profile reads at the library boundary, including inherited
+// and differently named sources, without duplicating PromptKit's discovery rules.
+type profileSourceFS struct {
+	fs.FS
+	mu    sync.Mutex
+	paths map[string]struct{}
+}
+
+func (f *profileSourceFS) ReadFile(name string) ([]byte, error) {
+	data, err := fs.ReadFile(f.FS, name)
+	if err == nil {
+		f.mu.Lock()
+		f.paths[name] = struct{}{}
+		f.mu.Unlock()
+	}
+	return data, err
+}