DowngradeRejected
The database claims to hold plaintext from before record encryption, but it cannot be proven to be such a database: it was bound to a storage key before, holds records only encrypted storage has, or the storage key provider already holds a key without a valid migration intent (S1, finding F7; docs/storage-encryption.md, "Downgrade protection"). Nothing was encrypted or changed.