nx_tls13_client_test.nx

nx_tls13_client_test.nx -- in-memory end-to-end handshake dispatch. Synthesises an entire server-handshake message stream (EncryptedExtensions + Certificate + CertificateVerify + server Finished) and walks it through the state machine. Uses the shipped handshake-key orchestrator (RFC 8448 §3 inputs) to derive real AEAD keys + finished_keys, so the server_Finished MAC is computed correctly and the dispatcher must accept it. Then runs: - tampered SF MAC -> SF_BAD_MAC verdict - wrong message type at each state -> BAD_MSG_TYPE verdict - client_Finished structure + emit - record-layer encrypt/decrypt round-trip on our emitted bytes expect_exit: 0 license_tier: ORIGINAL