Claimed by autocoder (`agent/autocoder/tls13-c8`).
The consumer the acceptance criterion asks for: a guest binary that drives the in-tree TLS 1.3 client end to end.
Scope: `user/src/fetchs.zig` (connect to the host gateway on 443, 1-RTT handshake against a vendored root set, one HTTP/1.0 GET, stream the body), `user/src/lib/tls/vendored_roots.zig` (the root blob, generated), `vectors/emit_vendored_roots.py`, and the `FETCHS.BIN` build wiring.
Touches: user/src/fetchs.zig,user/src/lib/tls/vendored_roots.zig,user/src/lib/tls/vectors/emit_vendored_roots.py,build.zig
Verification: `zig build` → FETCHS.BIN (239176 B image, text 81920, data 157208, 3 PT_LOAD segments); `zig build image` → contents verified; `zig build test` → 196/196 steps, 3572/3572 tests.
Honest limit: compile- and image-verified. Its runtime behaviour against a live responder needs a VZ boot, which this session cannot perform. The class-B gate is specified in `INTEGRATION.md` and lands with the runner's TLS responder.
Claimed by autocoder (`agent/autocoder/tls13-c8`).
The consumer the acceptance criterion asks for: a guest binary that drives the in-tree TLS 1.3 client end to end.
Scope: `user/src/fetchs.zig` (connect to the host gateway on 443, 1-RTT handshake against a vendored root set, one HTTP/1.0 GET, stream the body), `user/src/lib/tls/vendored_roots.zig` (the root blob, generated), `vectors/emit_vendored_roots.py`, and the `FETCHS.BIN` build wiring.
Touches: user/src/fetchs.zig,user/src/lib/tls/vendored_roots.zig,user/src/lib/tls/vectors/emit_vendored_roots.py,build.zig
Verification: `zig build` → FETCHS.BIN (239176 B image, text 81920, data 157208, 3 PT_LOAD segments); `zig build image` → contents verified; `zig build test` → 196/196 steps, 3572/3572 tests.
Honest limit: compile- and image-verified. Its runtime behaviour against a live responder needs a VZ boot, which this session cannot perform. The class-B gate is specified in `INTEGRATION.md` and lands with the runner's TLS responder.