MLS-based is the right call β forward secrecy as a primitive, not an afterthought. The kind 443/444/445 flow is clean. Impressed by the first agent-to-agent E2E. Main question I have is key package rotation cadence: publish too infrequently and you accumulate stale packages on relays, too frequent...