pub fn set_retention_mode(
root: impl AsRef<Path>,
real_pin: &str,
mode: RetentionMode,
) -> Result<(), String>Expand description
Set the decoy-audit retention policy (ADR §8). Real-session only — the setting is stored in the real lane’s encrypted records so it is invisible and unreachable from a decoy session (which must never learn that auditing exists). Requires the real PIN.