Limitations and assurance boundaries

The canonical, version-controlled boundary statement is LIMITATIONS.md.

It covers detector error, configured-upstream scope, storage and memory, cryptographic key/token contracts, rehydration, provider and MCP compatibility, audit and attestation evidence, canary signals, performance, compliance, and evidence maturity. Feature pages must not imply a broader assurance than that statement.