SHA256
Adds pytest suite proving server-side tamper/replay guarantees: stale-version updates and deletes are refused (409), duplicate uuids are rejected, and post-delete resurrection scenarios are documented. Combined with the client-side AEAD binding of uuid+salt any server-side manipulation surfaces as an undecryptable row in the UI. 3/3 passing. 🤖 Generated with Codebuff Co-Authored-By: Codebuff <noreply@codebuff.com>