Harden prompt debug redaction

docs/integrations/promptkit.md

@@ -29,6 +29,10 @@ Profiles that require a direct API key are unsupported; a profile that reports `
 
 Promptkit receives the YAML data package as an inline input and returns structured JSON that Weatherreporter validates before rendering its own Markdown template. The package contains only reviewed prompt-facing warning summaries, never source transport or provenance details. Safe active provenance remains in memory. Content-rich diagnostics are opt-in through `--llm-debug-dir`; see [operations](../operations.md) for retention and permissions.
 
+When capture is enabled, its preparation artifact projects a provider endpoint
+to its scheme and host and retains only reviewed execution settings. Provider
+extras and URL user information, paths, queries, and fragments are omitted.
+
 ## Comparison Execution
 
 For `compare`, Weatherreporter validates one exact prompt and every explicitly

docs/operations.md

@@ -143,6 +143,10 @@ remain distinct. Normal output, summaries, and routine logs omit that sensitive
 content. Debug capture is never created for an ordinary command without
 `--llm-debug-dir`.
 
+Preparation captures retain only the provider endpoint origin and reviewed
+execution settings. URL user information, paths, queries, fragments, and
+unrecognized provider parameters are omitted.
+
 If capture creation or writing fails, the affected run fails rather than
 silently continuing without the requested diagnostics.