[emmet-bot]

Summary

• Document secrets.iterations as the actual PBKDF2 count for encrypted backup files.
• Require new encrypted writers to record the count, recommend 600,000, and define absent legacy files as exactly 10,000.
• Require malformed present values to be rejected before key derivation and prohibit retrying with another count.
• Keep the field at the encrypted secrets level; unencrypted backups, data, format version, AES-GCM, and payload schema are unchanged.

Consistency

The property location, 600000 new default, absent-only 10000 fallback, validation, and exact-count behavior match the AI backup skill and the mobile implementation. The implementation-defined upper-bound allowance is documented without imposing a new format maximum.

Verification

• LSP structural checks: all checks passed.
• AI-skill comparison: all checks passed, with no contract conflicts.
• Mutation checks: 9/9 deliberately broken documents detected.
• Independent Claude Opus 5.5 max review: APPROVE; no fix-required findings.