Clarify in API/README that device limits are enforced independently per
normalized device type with atomic overflow revocation, and add a mapper
test covering the RFC3339 UTC timestamp contract.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
