nx_tls13_client_session_recv_hs_test.nx

nx_tls13_client_session_recv_hs_test.nx -- KAT for step 3c.3: recv encrypted handshake records + dispatch loop. Full happy-path (synthetic encrypted record round-tripped end-to-end) is queued; the underlying nx_tls13_loopback_test already exercises the encrypt/decrypt round-trip + the underlying dispatcher's KAT covers state-machine logic. This KAT verifies the WRAPPER's contract surface: - state guards (must be in WAIT_EE..WAIT_SF) - record-length guards (too short = RECORD_FAIL) - record-decrypt verdict propagation (wrong key/tag = RECORD_FAIL) - server_seq increment on every call (even failures) - sealed verdict gate expect_exit: 0 license_tier: ORIGINAL