Observe claimed prepared executions

docs/internal/observation.md

@@ -6,7 +6,10 @@ Its event values and callback type live in `internal/domain` so internal
 requests can carry them without depending on the recorder package. The
 recorder currently supplies run IDs to the runner and receives attempt and
 retry-delay measurements from the generation coordinator. Run lifecycle
-instrumentation from ordinary `Run` at the facade and runner boundaries.
+instrumentation for ordinary `Run` runs at the facade and runner boundaries.
+Prepared execution starts only after its private payload is atomically claimed;
+the facade receives that invocation's recorder privately and emits the terminal
+event after public error mapping. Failed claims and preparation emit nothing.
 
 A recorder keeps only counters, resolved identity fields, and the selected
 callback. It has no global history, queue, goroutine, or mutex held across a

docs/internal/runner.md

@@ -140,7 +140,8 @@ through context. Prompt and profile identities are enriched only after their
 respective resolutions succeed, before admission. The facade starts observation
 before request conversion and emits its terminal event after public error
 mapping and after the runner's deferred admission release. Preparation and
-prepared execution have no observation delivery yet.
+prepared execution follows the same terminal mapping after a successful claim;
+invalid or discarded handles do not acquire an observer.
 
 Validation preparation and execution honor cancellation at every
 Promptkit-controlled boundary and do not publish a partial plan or result.