Frame oracle push/pull as a trust model, not just cadence
The overview described push and pull only as update timing. Add a subsection on who publishes and what a pull oracle's signature does and does not guarantee (integrity yes, liveness and freshness no), tying it to the existing freshness warning and multi-oracle reconciliation. Mirror the integrity-vs-liveness note on the Pyth page.