Parallel kind/value enums with a validate() invariant. Password, Concealed, and Totp kinds are marked history-tracked so the Item setter (next task) can decide whether to capture history on update. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>