Encryption for recorded sessions: what we do and what we cannot promise

An honest explanation of how we protect session data in CauceOS: TLS 1.3 in transit, AES-256 at rest, short retention, and what structural limitations exist in any AI-assisted system.