docs(tasks): narrow invariant rationale

packages/tasks/tasks-local/src/invariant.ts

@@ -15,10 +15,11 @@ export const name = 'tasks-local-invariant'
 export const inject = ['invariants']
 
 /**
- * No runtime invariant: the Service Definition companion in `@deepseek-ai/dsh-tasks` validates
- * every published snapshot. `LocalTaskService.start()` enforces this provider's configured
- * admission limit synchronously before producer execution; repeating that aggregate check here
- * would expose provider-private configuration solely to this companion.
+ * No runtime invariant: `@deepseek-ai/dsh-tasks/invariant` owns per-snapshot identity, status,
+ * timestamp, and owner checks. This provider's admission decision uses private configuration and
+ * must fail before a backend starter runs; `LocalTaskService.start()` enforces it synchronously
+ * for current producers. Repeating an aggregate after publication would expose private
+ * configuration solely to this companion and would not verify the fail-closed pre-start guarantee.
  */
 const install: InvariantInstaller = () => {}