docs: extend smoke source inventory notes

docs/runbooks/rpc-cli-smoke.md

@@ -67,6 +67,8 @@ Expected:
 
 ```bash
 uv run wf --config wf.config.json source list --format compact
+uv run wf --config wf.config.json source resources everything.default
+uv run wf --config wf.config.json source prompts everything.default --format json
 uv run wf --config wf.config.json cap list --source wf.std --format ids
 uv run wf --config wf.config.json cap inspect wf.std.constant
 ```
@@ -74,6 +76,8 @@ uv run wf --config wf.config.json cap inspect wf.std.constant
 Expected:
 
 - `source list` includes `wf.std`.
+- `source resources` and `source prompts` return bounded inventory only; they do
+  not read resource bodies or render prompt templates.
 - `cap list --source wf.std --format ids` returns bounded identifiers.
 - `cap inspect wf.std.constant` shows the capability contract.
 

docs/source_architecture.md

@@ -111,6 +111,11 @@ content. A helper capability such as `wf.source.read_resource` receives the ref,
 uses runtime/platform context to resolve the logical source, and applies bounded
 output policy before returning text into workflow state/output.
 
+Prompt rendering uses the same source ownership rules, but it is not yet exposed
+as a workflow helper source. Keep prompt support at inventory/inspection level
+until there is a concrete graph use case, argument schema contract, and bounded
+output policy equivalent to `wf.source.read_resource`.
+
 For MCP, the provider also owns stateful upstream sessions:
 
 ```text