Secure prompt debug filesystem writes

2026-08-13 01:28:49 +00:00
parent a38d291f63
commit 44af91cadf
9 changed files with 421 additions and 107 deletions
--- a/docs/integrations/promptkit.md
+++ b/docs/integrations/promptkit.md
@@ -32,6 +32,8 @@ Promptkit receives the YAML data package as an inline input and returns structur
 When capture is enabled, its preparation artifact projects a provider endpoint
 to its scheme and host and retains only reviewed execution settings. Provider
 extras and URL user information, paths, queries, and fragments are omitted.
+Capture storage remains confined to the operator-selected debug root; an unsafe
+filesystem path causes the requested execution to fail.

 ## Comparison Execution