Clarify the security version field

Explain that the security version field must increment for every code
update. This intends to exclude implementations that only update the
security version selectively, possibly after multiple code updates have
been applied.

Change-Id: Ie47e85ddb2411a773f959be5bd953197c6c73af5
Reviewed-on: https://pigweed-review.googlesource.com/c/open-dice/+/181132
Reviewed-by: Darren Krahn <dkrahn@google.com>
Commit-Queue: Auto-Submit <auto-submit@pigweed-service-accounts.iam.gserviceaccount.com>
Pigweed-Auto-Submit: Andrew Scull <ascull@google.com>
Reviewed-by: Max Bires <jbires@google.com>
diff --git a/docs/android.md b/docs/android.md
index 6398996..11a8960 100644
--- a/docs/android.md
+++ b/docs/android.md
@@ -76,12 +76,12 @@
 Unless explicitly stated as required in the [versions](#versions) section, each
 field is optional. If no fields are relevant, an empty map should be encoded.
 
-Name                   | Key    | Value type           | Meaning
+Name                   | Key    | Value&nbsp;type      | Meaning
 ---                    | ---    | ---                  | ---
 Component&nbsp;name    | -70002 | tstr                 | Name of the component
 Component&nbsp;version | -70003 | int&nbsp;/&nbsp;tstr | Version of the component
 Resettable             | -70004 | null                 | If present, key changes on factory reset
-Security&nbsp;version  | -70005 | uint                 | Machine-comparable, monotonically increasing version of the component where a greater value indicates a newer version, for example, the anti-rollback counter
+Security&nbsp;version  | -70005 | uint                 | Machine-comparable, monotonically increasing version of the component where a greater value indicates a newer version. This value must increment for every update that changes the code hash, for example by using the timestamp of the version's release.
 [RKP&nbsp;VM][rkp-vm]&nbsp;marker | -70006 | null      | If present, the component can take part in running a VM that can receive an attestation certificate from an [RKP Service][rkp-service].
 
 [rkp-vm]: https://android.googlesource.com/platform/packages/modules/Virtualization/+/main/service_vm/README.md#rkp-vm-remote-key-provisioning-virtual-machine