Connect processing to shared PromptKit backend capacity

docs/policy/architecture.md

@@ -22,7 +22,7 @@ and [integration documentation](../integrations/subprocess.md) own external cont
   normalization, chunking, output, diagnostics, and reporting contracts. Domain
   behavior must not require CLI or provider-transport knowledge.
 - **Framework:** owns orchestration contracts and shared runtime mechanics for
-  modules, validators, proposals, LLM adapters, scheduling, and report assembly.
+  modules, validators, proposals, LLM adapters, and report assembly.
   It composes domain operations through explicit inputs and outputs.
 - **Modules:** own narrowly scoped correction behavior and module-specific prompt
   choices. Keep module packages separate rather than collapsing their distinct
@@ -45,9 +45,10 @@ hidden global state.
 - Validate corrections before final mutation, including local proposal checks,
   decision cardinality, and apply-time safety. Provider-side schema enforcement
   does not replace these checks.
-- Keep concurrency bounded, configurable, context-aware, and observable through
-  the existing scheduler and utilization diagnostics. Preserve permit release on
-  success, failure, and cancellation.
+- Keep LLM concurrency bounded and context-aware through PromptKit's engine-local
+  per-backend admission. Proposal and validation calls selecting the same backend
+  share that capacity, including retries and repairs. Preserve deterministic
+  collection order and cancellation of remaining work on runtime failure.
 - Keep module and validator identities, reason codes, and execution-class
   distinctions stable where exposed as contracts.
 
@@ -84,9 +85,10 @@ responsibilities and should remain separate. Implementation details belong in
 ## Dependencies
 
 Keep Audita dependency-light and prefer the Go standard library for CLI parsing,
-HTTP, JSON, filesystems, synchronization, and tests. Third-party dependencies
-should be narrow, justified, and preferably established for their purpose.
-YAML parsing is the existing direct dependency exception.
+filesystems, synchronization, and tests. ConfigKit owns configuration loading,
+presence, provenance, and secret resolution; PromptKit owns prompt/profile
+loading, OpenAI-compatible transport, retries, repairs, and backend admission.
+Audita owns domain meaning, role selection, and deterministic processing.
 
 Do not introduce broad CLI, dependency-injection, workflow, logging, or plugin
 frameworks without a concrete implemented need and focused tests.