Document captured configuration comparison

configuration_inspection.go

@@ -30,10 +30,13 @@ func (e *Engine) InspectConfiguration() (ConfigurationInspection, error) {
 // Diff compares this view's captured effective configuration with other. This
 // view is the earlier (left) value and other is the later (right) value. The
 // comparison delegates to ConfigKit's frozen effective-value semantics, so
-// source or resolution history alone does not create differences. Either zero
-// view returns ErrInvalidConfig and no records. Returned records can contain
-// ordinary application data and are not evidence of equivalent execution
-// behavior; callers choose where and to whom to disclose them.
+// source or resolution history alone does not create differences. It does not
+// reread external sources or compare referenced file contents, resolved
+// credential contents, later execution preparation, or request-specific
+// overrides. Either zero view returns ErrInvalidConfig and no records; other
+// ConfigKit errors are returned unchanged. An empty diff is not evidence of
+// equivalent engine behavior or execution. Records can contain ordinary
+// application data, so callers choose where and to whom to disclose them.
 func (v ConfigurationInspection) Diff(other ConfigurationInspection) ([]configkit.Difference, error) {
 	if v.source == nil || other.source == nil {
 		return nil, ErrInvalidConfig