Signed and encrypted Rails cookies for tamper resistant state

Client-side cookies should be treated as attacker-controlled even when the framework signs them. I use encrypted cookies for sensitive state, keep payloads minimal, and avoid long-lived authorization decisions inside the browser. The convenience of cookie-backed state should not blur trust boundaries.