Clarify inspected input identifier disclosure

requirements.go

@@ -21,7 +21,8 @@ type RequirementInspectionRequest struct {
 	ProfileID string
 	// Vars supplies string values for caller-variable lookups and simple
 	// conditions. Presence is determined by exact map key, including an empty
-	// value; values are not returned in the inspection.
+	// value. Inspection reports caller keys and presence, not their values.
+	// A supplied value may nevertheless appear as a resolved input identifier.
 	Vars map[string]string
 	// SessionID, when nonblank after the normal session-ID normalization,
 	// bypasses the prompt's session template during discovery.
@@ -164,6 +165,10 @@ type RequirementInspection struct {
 // a useful partial result with Complete false. The returned inventories do
 // not reject otherwise valid templates or prohibit their use.
 //
+// Results exclude artifact payloads, prompt contents, and unrelated supplied
+// values. Resolved input identifiers may equal the caller values that supply
+// them; those identifiers are intentionally included in the inventory.
+//
 // This method does not perform artifact, schema, credential, rendering,
 // validation, capacity, observation, provider, or execution work. Complete
 // describes dependency discovery, not whether every dependency is supplied or