Capture provider failures in secure debug artifacts

2026-08-25 19:55:09 +00:00
parent b3b23fb381
commit 4cd5f505df
7 changed files with 91 additions and 11 deletions
--- a/docs/policy/architecture.md
+++ b/docs/policy/architecture.md
@@ -66,6 +66,8 @@ directly.
 - Sensitive rendered prompts, schemas, input bodies, provider endpoints, and
  credentials never enter normal summaries or logs. They are written only to
  an explicit secure debug root when requested.
+- Provider-controlled diagnostics never enter ordinary outputs; they are
+  retained only in explicit secure failure-debug artifacts.

 ## Output, Notification, And Testing Invariants