Security Model

Status: draft. This protocol has not yet received an independent security audit. One is scheduled. Do not rely on it for life-safety or high-risk communication until the audit is published. Full threat model (named adversary, in-scope and out-of-scope attacks), the identity-to-handshake binding spec, and known open questions will be published here before any audit engagement begins.