Audit metadata prompt fallback boundaries

docs/prompt-pool-routing-map.md

@@ -236,6 +236,8 @@ and to compare the exact per-axis RNG seed used for the row.
 representative single row and Insta/OF pair, verifies embedded
 `generation_trace` fields, and confirms Krea2, SDXL, and caption formatters
 consume metadata JSON instead of silently falling back to raw prompt text.
+The same audit also statically rejects direct `row["prompt"]` reads in
+formatter metadata modules outside the shared fallback helpers.
 
 ## Category Sources