Invariants
The properties this package refuses to break, and what enforces each one.
Security
The security boundaries the package enforces for you, and the ones that remain yours.
Retention and erasure
How long each record is kept, why the windows differ, and what an erasure actually removes.