Shared TLS 1.3 authentication and secret derivation over exact handshake bytes.
This core never constructs record keys, encrypts records, or accesses sockets. Transport adapters own framing, delivery barriers and record/packet epochs. Inputs contain already loaded trust and fresh connection key material.