Track completed execution artifact paths

docs/internal/app-orchestration.md

@@ -13,6 +13,11 @@ callback, executes the prepared prompt, saves execution provenance and raw
 output, validates generated text, renders Markdown, and optionally copies or
 notifies from the managed report.
 
+After a completed prompt run, each successfully written downstream artifact is
+atomically added to the execution record before the corresponding metadata
+rewrite. Later failures therefore leave the original Promptkit outcome and its
+last durable set of reached paths inspectable.
+
 Failure results retain all safe paths reached so far. Validation rejection
 persists raw output and execution provenance but does not render a report.
 

docs/internal/state.md

@@ -37,6 +37,12 @@ consistent provenance, and status-appropriate validation or bounded classified
 errors. Completed execution provenance keeps Promptkit's run identity distinct
 from the Weatherreporter run identity.
 
+For a completed prompt run, the execution record is atomically replaced after
+each downstream artifact is saved. Its path set therefore records the raw and
+normalized generated text, render context, managed report, requested output
+copy, and notification artifact actually reached without changing the original
+Promptkit outcome.
+
 `PromptDebugWriter` is separate from workspace state. An empty root disables
 it. An enabled absolute root is checked for safe directories and symlinks, then
 stores `preparation.json` and `execution.json` beneath