Document consumer safety and offline execution

docs/consumers/pkg-promptkit.md

@@ -16,8 +16,8 @@ import "gitea.maximumdirect.net/eric/promptkit"
 ```
 
 The following Go fragments are illustrative and omit surrounding package,
-import, and error-handling code. Use the maintained example for a complete
-program.
+import, and error-handling code. Use the maintained examples for complete
+programs.
 
 ## Construct An Engine
 
@@ -68,6 +68,13 @@ configured model client, classifies the generated artifact, and validates the
 content. A completed content check may return `ValidationFailed` in the result;
 an operational inability to validate returns an error.
 
+The maintained
+[offline execution example](../../examples/go-library/run/main.go) injects a
+deterministic model client and exercises `Run` without credentials, network
+access, or paid calls. It is intentionally separate from the preparation
+example so each workflow and its small prompt fixture can be copied and run on
+its own.
+
 Use the [`RunResult` and `ValidationResult` GoDoc](../../types.go) for the
 returned data and the `Engine.Run` GoDoc for failure and cancellation
 semantics. The
@@ -98,12 +105,29 @@ from supported JSON values and the package's `String` and `GoString`
 summaries. The exact precedence and redaction guarantees belong to
 [`RunRequest`, `GenerateRequest`, and the profile GoDoc](../../types.go).
 
+## Protect Files And Generated Data
+
+The default artifact reader opens a `File` reference as a caller-selected
+operating-system path. It does not constrain paths to an application root,
+impose an inbound request-size policy, or establish an untrusted-input security
+boundary. Applications must validate and restrict untrusted paths and payloads
+before constructing a request, or inject an artifact reader that enforces
+their filesystem, authorization, and size policies.
+
+Rendered messages, input and output artifact bodies, raw model output, and
+validation diagnostics can contain sensitive data. API-key redaction does not
+sanitize those values. Treat prepared values, results, collaborator requests,
+errors, and logs according to the application's data-access, retention, and
+secret-handling policies.
+
 ## Extension Interfaces
 
 Inject an [`LLMClient` or `ArtifactReader`](../../types.go) when the built-in
 behavior does not fit the application. Their GoDoc defines concurrent use,
 context handling, ownership of copied values, nil responses, and preservation
-of collaborator errors.
+of collaborator errors. Implementations must honor cancellation, safely manage
+copies they retain, avoid unsafe logging of content or credentials, and enforce
+the application policy that motivated the injection.
 
 ## Handle Errors
 
@@ -119,4 +143,5 @@ documented.
 
 Promptkit is an importable library. It does not own a command, inbound HTTP
 API, process configuration, or deployment policy. Applications map the root
-package's results and errors into those concerns.
+package's results and errors into those concerns, including inbound size and
+trust policy.