Enable PromptKit repair attempts

docs/policy/architecture.md

@@ -56,6 +56,8 @@ directly.
   executes them.
 - Prompt and profile validation completes before weather collection. Raw output
   is validated before template rendering.
+- PromptKit may make at most the prompt contract's one corrective generation;
+  exhaustion is a validation rejection, not an application-level retry.
 - Comparison validates every explicit profile before collection, prepares one
   immutable report input, and delegates backend capacity to Promptkit rather
   than adding an application-wide execution limit.