Clarifies what AEAD protects (tampering) vs. what it doesn't (deletion, rollback). Documents that git history is the audit trail and device authentication is the mitigation. Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
