Parent: #28 (relates to #31, #34)
Deferred — needs an actual group-key distribution/rotation mechanism that exists nowhere in this spec today. Rotation-on-kick genuinely conflicts with an append-only log keeping old entries readable under the old key. Deserves its own dedicated design pass, the same treatment #29/#30/#31 got — not a paragraph of reasoning layered on top of what already exists.
Parent: #28 (relates to #31, #34)
Deferred — needs an actual group-key distribution/rotation mechanism that exists nowhere in this spec today. Rotation-on-kick genuinely conflicts with an append-only log keeping old entries readable under the old key. Deserves its own dedicated design pass, the same treatment #29/#30/#31 got — not a paragraph of reasoning layered on top of what already exists.