Protocol draft

Status: proposal only. No stable wire format is defined.

Before assigning wire values, the design must specify:

• Protocol identification and version negotiation.
• Authenticated handshake and identity model.
• Framing, length limits, and behavior for unknown messages.
• Stream identifiers, ordering, flow control, and backpressure.
• Close, timeout, cancellation, and error semantics.
• Session resumption, replay protection, and duplicate handling.
• Migration between transports, if implemented.
• Downgrade resistance and compatibility policy.

Security rule

Use a reviewed TLS implementation and standard cryptographic constructions. Do not invent cryptographic primitives or silently downgrade security when a handshake fails.