PrivCount noise specification
Let's write a spec for PrivCount noise:
how noise is determined for each statistic
how much noise each relay adds
how to interpret the final result
how to avoid obvious pitfalls