0.16.7

TLS connections now negotiate TLS 1.3 when the server supports it, while remaining compatible with TLS 1.2-only servers. This requires sigil-crypto 0.16.6 or later in the 0.16 series, with Mbed TLS 3.6.7 and PSA enabled.

New tls-connect/details and tls-upgrade/details procedures return per-attempt handshake errors, state, verification flags and negotiated protocol/cipher. The existing connection and /status APIs retain their argument and return shapes. Bounded handshakes keep their existing total deadlines.

Validation: 22 TLS tests and 100 crypto tests passed. Native Linux and Android fixtures each passed forty encrypted roundtrips per TLS version, certificate rejection, and reconnect after rejection. Production certificate verification was also exercised with TLS 1.3 clients on both systems. These checks do not establish a terminal-latency or CPU improvement.