Proposed Wording: Add something like: ".Only authorized systems/user (i.e. the system/user responsible for its "authorship" according the related "Provenance" record) will be allowed to "update."

Comment:

This operation needs additional explicit caveats to protect unauthorized "update" from a system that is not the original source of information.

We need to explain precisely how the security guidance should be applied to this *specific" operation including the use of Consent and Provenance to make access control decisions. (/security.html) including consent to make sure only authorized systems an users are viewing, changing, updating, or reviewing the update history of a resource.