Harden durable prompt state contracts

This commit is contained in:
2026-07-31 16:45:26 +00:00
parent 25782447eb
commit 870b54a4a0
5 changed files with 732 additions and 5 deletions

View File

@@ -31,6 +31,12 @@ readable; their historic preflight and generated-text-result fields are mapped
to the corresponding preparation and execution views during inspection. New
runs never write V1 records.
Prompt preparation and execution records are validated on both save and load.
They require exact report/prompt identity, complete timing, internally
consistent provenance, and status-appropriate validation or bounded classified
errors. Completed execution provenance keeps Promptkit's run identity distinct
from the Weatherreporter run identity.
`PromptDebugWriter` is separate from workspace state. An empty root disables
it. An enabled absolute root is checked for safe directories and symlinks, then
stores `preparation.json` and `execution.json` beneath