- AttachmentId now uses 16 bytes of SHA-256 (128 bits) instead of 8, requiring ~2^64 work for birthday collision instead of ~2^32. - Added is_valid() to ItemId and AttachmentId for path traversal prevention during backup restore. Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>