$check direct-v2
✓session:PQXDH + signed prekeys
✓messages:Double Ratchet
✓media:AES-256-GCM key in ratchet
✓key_change:fail-closed + QR
$check boundaries
✓local_vault:master password + PBKDF2
✓server_ttl:48h → auto_delete
✓calls:WebRTC DTLS-SRTP via TURN
!server_sees:IP + IDs + timing + size
✓ INTERNAL REVIEW PASSED