{
  "adjudicated": false,
  "note": "Design-arounds exist (e.g., re-attest on change, central attestation service). Switching cost is integration depth, not cryptography."
}