generation 4: integration suite — seam round-trips + invariant pins
tests/server_seams.rs:
- TlsServerConfig::new per identity variant → rustls_config() +
for_tcp_tls (tcp) + for_noq (noq); ALPN + max_early_data_size=u32::MAX
asserted per path; Acme-no-feature → AcmeConfig cell
tests/client_seams.rs:
- TlsClientConfig::new per credentials cell → into_rustls_config +
for_noq; enable_early_data=true + single-value ALPN pinned
tests/invariant_pins.rs:
- nine-scheme exact-list pin (vec equality, order included)
- verifier-selection + client-auth presentation matrices via public
API (Debug probe for the pub(super) verifier, direct resolver
introspection); root-store fallback non-empty
tests/acme_lifecycle.rs (#![cfg(feature = acme)]):
- spawn-and-return, acme-tls/1 in ALPN, resolver wiring, 0-RTT on the
ACME branch; blackhole + staging URLs — zero network I/O
Verification: all five feature combos green (default 68+13, noq 72+16,
tcp 71+13, acme 68+11, all-features 75+17), clippy -D warnings,
fmt --check, doc --no-deps
glm-5.3-flash
87b69e19e6