[{"data":1,"prerenderedAt":896},["ShallowReactive",2],{"navigation_docs":3,"-zero-knowledge-cryptography-pq-hpke-envelope":234,"-zero-knowledge-cryptography-pq-hpke-envelope-surround":891},[4,26,47,68,89,114,135,164,181,210],{"title":5,"path":6,"stem":7,"children":8,"page":25},"1. Getting Started & Pricing","\u002Fgetting-started","01.getting-started",[9,13,17,21],{"title":10,"path":11,"stem":12},"1.1 5-Minute Quickstart","\u002Fgetting-started\u002Fquickstart","01.getting-started\u002F1.quickstart",{"title":14,"path":15,"stem":16},"1.2 Project Boards Setup","\u002Fgetting-started\u002Fboard-init","01.getting-started\u002F2.board-init",{"title":18,"path":19,"stem":20},"1.3 GitHub Actions & GitLab CI Runner Setup","\u002Fgetting-started\u002Fci-runners","01.getting-started\u002F3.ci-runners",{"title":22,"path":23,"stem":24},"1.4 Organization Credit Pool & Per-Function Credit Pricing","\u002Fgetting-started\u002Forg-credits-and-slack","01.getting-started\u002F4.org-credits-and-slack",false,{"title":27,"path":28,"stem":29,"children":30,"page":25},"2. Pair & Triad Programming","\u002Fpair-and-triad-programming","02.pair-and-triad-programming",[31,35,39,43],{"title":32,"path":33,"stem":34},"2.1 Cross-Model Pair & Triad Programming","\u002Fpair-and-triad-programming\u002Foverview","02.pair-and-triad-programming\u002F1.overview",{"title":36,"path":37,"stem":38},"2.2 Isolated Shadow Workspaces","\u002Fpair-and-triad-programming\u002Fshadow-jj-workspaces","02.pair-and-triad-programming\u002F2.shadow-jj-workspaces",{"title":40,"path":41,"stem":42},"2.3 Cryptographic File-Scope Leases & Small-Diff Gates","\u002Fpair-and-triad-programming\u002Ffile-scope-leases","02.pair-and-triad-programming\u002F3.file-scope-leases",{"title":44,"path":45,"stem":46},"2.4 Sub-Issue to Subagent Fan-Out & Delta Velocity","\u002Fpair-and-triad-programming\u002Fsub-issue-fanout","02.pair-and-triad-programming\u002F4.sub-issue-fanout",{"title":48,"path":49,"stem":50,"children":51,"page":25},"3. Declarative Workflow Policy","\u002Fworkflow-policy","03.workflow-policy",[52,56,60,64],{"title":53,"path":54,"stem":55},"3.1 Declarative Workflow Policy Schema","\u002Fworkflow-policy\u002Fschema-reference","03.workflow-policy\u002F1.schema-reference",{"title":57,"path":58,"stem":59},"3.2 Cryptographic Conformance Matrix & Memory Tombstones","\u002Fworkflow-policy\u002Fwp-01-to-wp-15-matrix","03.workflow-policy\u002F2.wp-01-to-wp-15-matrix",{"title":61,"path":62,"stem":63},"3.3 Two-Tier Organization Governance Lattice","\u002Fworkflow-policy\u002Forg-policy-floor","03.workflow-policy\u002F3.org-policy-floor",{"title":65,"path":66,"stem":67},"3.4 Trusted Handoff Hooks & Independent Verification","\u002Fworkflow-policy\u002Fhandoff-hooks-h1-to-h5","03.workflow-policy\u002F4.handoff-hooks-h1-to-h5",{"title":69,"path":70,"stem":71,"children":72,"page":25},"4. Visual Geometry & Copy Gates","\u002Fvisual-and-copy-tribunals","04.visual-and-copy-tribunals",[73,77,81,85],{"title":74,"path":75,"stem":76},"12-Tuple DOM Geometry (176\u002F176)","\u002Fvisual-and-copy-tribunals\u002Fui-gate-geometry","04.visual-and-copy-tribunals\u002F1.ui-gate-geometry",{"title":78,"path":79,"stem":80},"Vision-3 Geometry & Auto-Patch","\u002Fvisual-and-copy-tribunals\u002Fcross-model-design-tribunal","04.visual-and-copy-tribunals\u002F2.cross-model-design-tribunal",{"title":82,"path":83,"stem":84},"64\u002F64 Declaration Copy Gate","\u002Fvisual-and-copy-tribunals\u002Fdeclaration-copy-gate","04.visual-and-copy-tribunals\u002F3.declaration-copy-gate",{"title":86,"path":87,"stem":88},"Synthetic CI Canary","\u002Fvisual-and-copy-tribunals\u002Fsynthetic-ci-canary","04.visual-and-copy-tribunals\u002F4.synthetic-ci-canary",{"title":90,"path":91,"stem":92,"children":93,"page":25},"5. Autonomous AI Program Manager","\u002Fdelivery-program-manager","05.delivery-program-manager",[94,98,102,106,110],{"title":95,"path":96,"stem":97},"Overview: Dual-Brain AI PM","\u002Fdelivery-program-manager\u002Foverview","05.delivery-program-manager\u002F1.overview",{"title":99,"path":100,"stem":101},"Executable Tickets & Auto-Splitting","\u002Fdelivery-program-manager\u002Fchinwag-tasks-and-never-stop","05.delivery-program-manager\u002F2.chinwag-tasks-and-never-stop",{"title":103,"path":104,"stem":105},".codegraph & FinOps Routing","\u002Fdelivery-program-manager\u002Fcodegraph-and-finops-arbitrage","05.delivery-program-manager\u002F3.codegraph-and-finops-arbitrage",{"title":107,"path":108,"stem":109},"++ Triage & CI Recovery","\u002Fdelivery-program-manager\u002Fplus-plus-ci-triage","05.delivery-program-manager\u002F4.plus-plus-ci-triage",{"title":111,"path":112,"stem":113},"Flight Deck & Trajectory Time-Travel","\u002Fdelivery-program-manager\u002Fflight-deck-and-time-travel","05.delivery-program-manager\u002F5.flight-deck-and-time-travel",{"title":115,"path":116,"stem":117,"children":118,"page":25},"6. The Chinwag Way & Scrimmages","\u002Fthe-chinwag-way","06.the-chinwag-way",[119,123,127,131],{"title":120,"path":121,"stem":122},"Academic Foundations","\u002Fthe-chinwag-way\u002Facademic-foundations","06.the-chinwag-way\u002F1.academic-foundations",{"title":124,"path":125,"stem":126},"Chips (◈) & 7-Day Survival","\u002Fthe-chinwag-way\u002Fchips-and-7day-survival","06.the-chinwag-way\u002F2.chips-and-7day-survival",{"title":128,"path":129,"stem":130},"Sealed Card (.cwcard.png) Drills","\u002Fthe-chinwag-way\u002Fsealed-card-handoff-drills","06.the-chinwag-way\u002F3.sealed-card-handoff-drills",{"title":132,"path":133,"stem":134},"Calibration Scrimmages","\u002Fthe-chinwag-way\u002Fcalibration-scrimmages","06.the-chinwag-way\u002F4.calibration-scrimmages",{"title":136,"path":137,"stem":138,"children":139,"page":25},"7. Zero-Knowledge Cryptography","\u002Fzero-knowledge-cryptography","07.zero-knowledge-cryptography",[140,144,148,152,156,160],{"title":141,"path":142,"stem":143},"PQ-HPKE Wire Envelope","\u002Fzero-knowledge-cryptography\u002Fpq-hpke-envelope","07.zero-knowledge-cryptography\u002F1.pq-hpke-envelope",{"title":145,"path":146,"stem":147},"Verify-Before-Decrypt (K1+K2)","\u002Fzero-knowledge-cryptography\u002Fverify-before-decrypt","07.zero-knowledge-cryptography\u002F2.verify-before-decrypt",{"title":149,"path":150,"stem":151},"Blinded Commitments & 128B Flywheel","\u002Fzero-knowledge-cryptography\u002Fblind-commitments","07.zero-knowledge-cryptography\u002F3.blind-commitments",{"title":153,"path":154,"stem":155},"Local Viewer & CISO DPA","\u002Fzero-knowledge-cryptography\u002Flocal-viewer-and-dpa","07.zero-knowledge-cryptography\u002F4.local-viewer-and-dpa",{"title":157,"path":158,"stem":159},"A.509 Agent Passports","\u002Fzero-knowledge-cryptography\u002Fa509-agent-pkix","07.zero-knowledge-cryptography\u002F5.a509-agent-pkix",{"title":161,"path":162,"stem":163},"chinwag-acu & CISO Kill Switch","\u002Fzero-knowledge-cryptography\u002Fchinwag-acu","07.zero-knowledge-cryptography\u002F6.chinwag-acu",{"title":165,"path":166,"stem":167,"children":168,"page":25},"8. E2EE Mesh & Extension SDK","\u002Fmesh-and-extensions","08.mesh-and-extensions",[169,173,177],{"title":170,"path":171,"stem":172},"chinwag-mesh & 3-Repo Time Machine","\u002Fmesh-and-extensions\u002Fsdk-and-cwcard-png-transport","08.mesh-and-extensions\u002F1.sdk-and-cwcard-png-transport",{"title":174,"path":175,"stem":176},"warroom & whisper Extensions","\u002Fmesh-and-extensions\u002Fwarroom-and-whisper","08.mesh-and-extensions\u002F2.warroom-and-whisper",{"title":178,"path":179,"stem":180},"teleport, shroud & vault","\u002Fmesh-and-extensions\u002Fgit-bundle-and-vault","08.mesh-and-extensions\u002F3.git-bundle-and-vault",{"title":182,"path":183,"stem":184,"children":185,"page":25},"9. CLI & GraphQL Reference","\u002Fcli-and-graphql-reference","09.cli-and-graphql-reference",[186,190,194,198,202,206],{"title":187,"path":188,"stem":189},"chinwag tasks & task","\u002Fcli-and-graphql-reference\u002Fchinwag-task","09.cli-and-graphql-reference\u002F1.chinwag-task",{"title":191,"path":192,"stem":193},"chinwag board & GraphQL","\u002Fcli-and-graphql-reference\u002Fchinwag-board","09.cli-and-graphql-reference\u002F2.chinwag-board",{"title":195,"path":196,"stem":197},"chinwag pair & triad","\u002Fcli-and-graphql-reference\u002Fchinwag-pair-and-triad","09.cli-and-graphql-reference\u002F3.chinwag-pair-and-triad",{"title":199,"path":200,"stem":201},"chinwag bus","\u002Fcli-and-graphql-reference\u002Fchinwag-bus","09.cli-and-graphql-reference\u002F4.chinwag-bus",{"title":203,"path":204,"stem":205},"chinwag-ci, fork-run & ui-gate","\u002Fcli-and-graphql-reference\u002Fchinwag-ci-and-uigate","09.cli-and-graphql-reference\u002F5.chinwag-ci-and-uigate",{"title":207,"path":208,"stem":209},"chinwag memory & tombstone","\u002Fcli-and-graphql-reference\u002Fchinwag-memory","09.cli-and-graphql-reference\u002F6.chinwag-memory",{"title":211,"path":212,"stem":213,"children":214,"page":-1},"10. Architecture PRDs","\u002Fprds","10.prds",[215,218,222,226,230],{"title":216,"path":212,"stem":217},"10.0 Ratified Architecture PRDs","10.prds\u002Findex",{"title":219,"path":220,"stem":221},"10.1 Ephemeral Tart Cleanroom VMs & Declarative Nix","\u002Fprds\u002Ftart-cleanroom-vms","10.prds\u002F1.tart-cleanroom-vms",{"title":223,"path":224,"stem":225},"10.2 Executable Delivery Boards & Proof-of-Green","\u002Fprds\u002Fdelivery-executable-boards","10.prds\u002F2.delivery-executable-boards",{"title":227,"path":228,"stem":229},"10.3 Cursor Agent SDK Importer & Sanitizer","\u002Fprds\u002Fcursor-agent-sdk-importer","10.prds\u002F3.cursor-agent-sdk-importer",{"title":231,"path":232,"stem":233},"10.4 Chinwag Local Web App & Command Center","\u002Fprds\u002Fhuman-command-center-ui","10.prds\u002F4.human-command-center-ui",{"id":235,"title":236,"body":237,"command":250,"description":884,"extension":885,"links":886,"meta":887,"navigation":888,"path":142,"seo":889,"stem":143,"__hash__":890},"docs\u002F07.zero-knowledge-cryptography\u002F1.pq-hpke-envelope.md","7.1 Post-Quantum HPKE Wire Envelope",{"type":238,"value":239,"toc":874},"minimark",[240,244,251,316,328,338,374,377,386,398,408,410,417,791,793,801,837,839,843],[241,242,236],"h1",{"id":243},"_71-post-quantum-hpke-wire-envelope",[245,246,247],"p",{},[248,249,250],"code",{},"CHWGHPKE v2 · X25519MLKEM768 + ChaCha20Poly1305",[252,253,254],"blockquote",{},[245,255,256,268,269,272,273,276,277,280,281,280,284,287,288,291,292,263,295,298,299,301,302,308,309,315],{},[257,258,259,260,263,264,267],"strong",{},"✅ Available Now (",[248,261,262],{},"v0.1.0"," · ",[248,265,266],{},"CHWG-PUB-101","):"," The ",[248,270,271],{},"+1,408-byte"," ",[248,274,275],{},"CHWGHPKE"," v2 hybrid post-quantum wire envelope (",[248,278,279],{},"X25519MLKEM768"," + ",[248,282,283],{},"HKDF-SHA256",[248,285,286],{},"ChaCha20Poly1305",") and Verify-Before-Decrypt dual ",[248,289,290],{},"Ed25519"," framing (",[248,293,294],{},"SignedHpkeBlobV1",[248,296,297],{},"✓ed25519",") are shipped and verified in ",[248,300,262],{},". See ",[303,304,306],"a",{"href":305},"\u002Fapi\u002Freality-matrix",[248,307,305],{}," and the ",[303,310,314],{"href":311,"rel":312},"https:\u002F\u002Fchinwag.sh\u002Froadmap",[313],"nofollow","Chinwag Public Roadmap",".",[252,317,318],{},[245,319,320,323,324,327],{},[257,321,322],{},"Our blind relay routes ciphertext only. Your source code never leaves your machine unencrypted."," Backed by ",[257,325,326],{},"6 patent-pending filings"," covering Vision-3 Visual Geometry, Cleanroom CI, Shadow-KV, and IETF A.509 under the Apache 2.0 Section 3 Patent Grant, protecting you from patent trolls and litigious competitors.",[245,329,330,331,334,335,315],{},"Every task spec, code diff, agent bus message, and CI stack trace that crosses a Chinwag relay or ",[248,332,333],{},".cwcard.png"," carrier is end-to-end encrypted on your developer workstation or CI runner ",[257,336,337],{},"before a single packet leaves the host",[245,339,340,341,344,345,350,351,354,355,358,359,362,363,366,367,366,370,373],{},"To protect intellectual property against both classical eavesdroppers and \"Harvest Now, Decrypt Later\" (",[248,342,343],{},"HNDL",") quantum adversaries, Chinwag standardizes on ",[257,346,347,349],{},[248,348,275],{}," v2"," · a hybrid post-quantum ",[257,352,353],{},"RFC 9180 HPKE"," wire envelope combining ",[257,356,357],{},"X25519"," elliptic-curve Diffie-Hellman with ",[257,360,361],{},"NIST FIPS 203 ML-KEM-768"," lattice key encapsulation (",[248,364,365],{},"KEM = 0x0030",", ",[248,368,369],{},"KDF = HKDF-SHA256",[248,371,372],{},"AEAD = ChaCha20Poly1305",").",[375,376],"hr",{},[378,379,381,382,385],"h2",{"id":380},"_32-bit-rfc-binary-header-diagram-1408-byte-fixed-framing","32-Bit RFC Binary Header Diagram (",[248,383,384],{},"+1,408-Byte"," Fixed Framing)",[245,387,388,389,391,392,397],{},"Every ",[248,390,275],{}," v2 frame adds a deterministic ",[257,393,394],{},[248,395,396],{},"1,408-byte"," cryptographic header and dual-signature envelope around the AEAD ciphertext:",[399,400,406],"pre",{"className":401,"code":403,"language":404,"meta":405},[402],"language-text"," 0                   1                   2                   3\n 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\n+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\n|                      Magic \"CHWG\" (0x43485747)                |Bytes 0..4\n+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\n|                      Magic \"HPKE\" (0x48504B45)                |Bytes 4..8\n+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\n|  Version (2)  |   Suite (1)   |          Flags (u16)          |Bytes 8..12\n+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\n|                       KEM ID (0x0030)         | KDF (0x0001)  |Bytes 12..16\n+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\n| AEAD (0x0003) |              Reserved Zero (u16)              |Bytes 16..20\n+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\n|                                                               |\n+            Sender Key ID \u002F A.509 Fingerprint (32 B)           +Bytes 20..52\n|                                                               |\n+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\n|                                                               |\n+          Recipient Key ID \u002F Org Vault Subkey (32 B)           +Bytes 52..84\n|                                                               |\n+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\n|                                                               |\n+             Blinded Topic Commitment T_coalesce (32 B)        +Bytes 84..116\n|                                                               |\n+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\n|                  Sequence Monotonic Counter (u64)             |Bytes 116..124\n+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\n|                    Timestamp Unix Micros (u64)                |Bytes 124..132\n+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\n|                                                               |\n+                 X25519MLKEM768 Encapsulated Key               +Bytes 132..1252\n|                 (32 B X25519 + 1,088 B ML-KEM-768)            | (1,120 Bytes)\n|                                                               |\n+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\n|                                                               |\n+               OriginSigV1: K1 Ed25519 Signature (64 B)        +Bytes 1252..1316\n|                                                               |\n+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\n|                                                               |\n+            CloudRelayBlobSigV1: K2 Ed25519 Sig (64 B)         +Bytes 1316..1380\n|                                                               |\n+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\n|             Header CRC32C (4B)|   Ciphertext Length (u64, 8B) |Bytes 1380..1392\n+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\n|             ChaCha20Poly1305 AEAD Tag (16 Bytes)              |Bytes 1392..1408\n+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\n|               Ciphertext Payload (Variable Length)            |Bytes 1408..N\n+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\n","text","",[248,407,403],{"__ignoreMap":405},[375,409],{},[378,411,413,414,416],{"id":412},"byte-offset-field-reference-signedhpkeblobv1","Byte-Offset Field Reference (",[248,415,294],{},")",[418,419,420,440],"table",{},[421,422,423],"thead",{},[424,425,426,431,434,437],"tr",{},[427,428,430],"th",{"align":429},"left","Byte Offset",[427,432,433],{"align":429},"Size (Bytes)",[427,435,436],{"align":429},"Field Name",[427,438,439],{"align":429},"Cryptographic Purpose",[441,442,443,472,500,533,560,581,604,630,666,701,728,763],"tbody",{},[424,444,445,451,456,461],{},[446,447,448],"td",{"align":429},[248,449,450],{},"0 .. 8",[446,452,453],{"align":429},[248,454,455],{},"8",[446,457,458],{"align":429},[248,459,460],{},"magic",[446,462,463,464,467,468,471],{"align":429},"ASCII ",[248,465,466],{},"\"CHWGHPKE\""," (",[248,469,470],{},"0x4348574748504B45",") · rejects non-Chinwag frames at byte 0.",[424,473,474,479,484,489],{},[446,475,476],{"align":429},[248,477,478],{},"8 .. 12",[446,480,481],{"align":429},[248,482,483],{},"4",[446,485,486],{"align":429},[248,487,488],{},"version_suite_flags",[446,490,491,492,495,496,499],{"align":429},"Protocol version ",[248,493,494],{},"0x02",", cipher profile ",[248,497,498],{},"0x01",", and compression\u002Fchunk flags.",[424,501,502,507,511,516],{},[446,503,504],{"align":429},[248,505,506],{},"12 .. 20",[446,508,509],{"align":429},[248,510,455],{},[446,512,513],{"align":429},[248,514,515],{},"hpke_identifiers",[446,517,518,467,520,522,523,467,526,522,528,467,531,373],{"align":429},[248,519,365],{},[248,521,279],{},"), ",[248,524,525],{},"KDF = 0x0001",[248,527,283],{},[248,529,530],{},"AEAD = 0x0003",[248,532,286],{},[424,534,535,540,545,550],{},[446,536,537],{"align":429},[248,538,539],{},"20 .. 52",[446,541,542],{"align":429},[248,543,544],{},"32",[446,546,547],{"align":429},[248,548,549],{},"sender_key_id",[446,551,552,555,556,559],{"align":429},[248,553,554],{},"BLAKE3-256"," fingerprint of the sender seat's ",[248,557,558],{},"A.509"," passport public key.",[424,561,562,567,571,576],{},[446,563,564],{"align":429},[248,565,566],{},"52 .. 84",[446,568,569],{"align":429},[248,570,544],{},[446,572,573],{"align":429},[248,574,575],{},"recipient_key_id",[446,577,578,580],{"align":429},[248,579,554],{}," fingerprint of the target seat or organization vault public key.",[424,582,583,588,592,597],{},[446,584,585],{"align":429},[248,586,587],{},"84 .. 116",[446,589,590],{"align":429},[248,591,544],{},[446,593,594],{"align":429},[248,595,596],{},"t_coalesce",[446,598,599,600,603],{"align":429},"Keyed ",[248,601,602],{},"BLAKE3"," blinded routing commitment (zero plaintext task or file names).",[424,605,606,611,616,621],{},[446,607,608],{"align":429},[248,609,610],{},"116 .. 132",[446,612,613],{"align":429},[248,614,615],{},"16",[446,617,618],{"align":429},[248,619,620],{},"seq_and_timestamp",[446,622,623,624,627,628,373],{"align":429},"Replay-protection monotonic sequence counter (",[248,625,626],{},"u64",") + microsecond UTC timestamp (",[248,629,626],{},[424,631,632,637,642,647],{},[446,633,634],{"align":429},[248,635,636],{},"132 .. 1252",[446,638,639],{"align":429},[248,640,641],{},"1,120",[446,643,644],{"align":429},[248,645,646],{},"encapsulated_key",[446,648,649,650,467,652,655,656,467,659,662,663,373],{"align":429},"Hybrid ",[248,651,357],{},[248,653,654],{},"32 B",") + ",[248,657,658],{},"ML-KEM-768",[248,660,661],{},"1,088 B",") encapsulated shared secret (",[248,664,665],{},"enc",[424,667,668,673,678,683],{},[446,669,670],{"align":429},[248,671,672],{},"1252 .. 1316",[446,674,675],{"align":429},[248,676,677],{},"64",[446,679,680],{"align":429},[248,681,682],{},"origin_sig_k1",[446,684,685,694,695,280,698,315],{"align":429},[257,686,687,688,690,691,416],{},"Inner\u002FOrigin ",[248,689,290],{}," signature (",[248,692,693],{},"K1"," over bytes ",[248,696,697],{},"0..1252",[248,699,700],{},"BLAKE3(ciphertext)",[424,702,703,708,712,717],{},[446,704,705],{"align":429},[248,706,707],{},"1316 .. 1380",[446,709,710],{"align":429},[248,711,677],{},[446,713,714],{"align":429},[248,715,716],{},"relay_sig_k2",[446,718,719,727],{"align":429},[257,720,721,722,690,724,416],{},"Outer Relay\u002FAttestation ",[248,723,290],{},[248,725,726],{},"K2"," binding ingress provenance.",[424,729,730,735,740,745],{},[446,731,732],{"align":429},[248,733,734],{},"1380 .. 1408",[446,736,737],{"align":429},[248,738,739],{},"28",[446,741,742],{"align":429},[248,743,744],{},"len_and_aead_tag",[446,746,747,748,751,752,755,756,272,759,762],{"align":429},"Header checksum (",[248,749,750],{},"4 B","), payload length (",[248,753,754],{},"8 B","), and ",[248,757,758],{},"Poly1305",[248,760,761],{},"16-byte"," authentication tag.",[424,764,765,770,777,783],{},[446,766,767],{"align":429},[257,768,769],{},"Total Overhead",[446,771,772],{"align":429},[257,773,774],{},[248,775,776],{},"1,408 B",[446,778,779],{"align":429},[257,780,781],{},[248,782,294],{},[446,784,785],{"align":429},[257,786,787,788,790],{},"Fixed ",[248,789,396],{}," overhead regardless of payload size.",[375,792],{},[378,794,796,797,800],{"id":795},"associated-authenticated-data-aad-binding","Associated Authenticated Data (",[248,798,799],{},"AAD",") Binding",[245,802,803,804,806,807,810,811,366,813,366,815,366,817,820,821,823,824,830,831,833,834,836],{},"When sealing the ",[248,805,286],{}," payload, bytes ",[248,808,809],{},"0 .. 1252"," of the header (including ",[248,812,549],{},[248,814,575],{},[248,816,596],{},[248,818,819],{},"seq",", and ",[248,822,646],{},") are passed as ",[257,825,826,827,416],{},"RFC 9180 Associated Authenticated Data (",[248,828,829],{},"aad",". Mutating a single bit of the routing header causes both ",[248,832,290],{}," verification and ",[248,835,758],{}," tag verification to fail closed immediately.",[375,838],{},[378,840,842],{"id":841},"next-steps","Next Steps",[844,845,846,864],"ul",{},[847,848,849,272,852],"li",{},[257,850,851],{},"Next:",[303,853,854,855,272,858,860,861,416],{"href":146},"Verify-Before-Decrypt (",[248,856,857],{},"K1+K2",[248,859,290],{}," in ",[248,862,863],{},"0.09ms",[847,865,866,272,869],{},[257,867,868],{},"Ready for post-quantum zero-knowledge coordination?",[303,870,873],{"href":871,"rel":872},"https:\u002F\u002Fchinwag.sh\u002Fpricing",[313],"Reserve Your Organization Credit Pack →",{"title":405,"searchDepth":875,"depth":875,"links":876},2,[877,879,881,883],{"id":380,"depth":875,"text":878},"32-Bit RFC Binary Header Diagram (+1,408-Byte Fixed Framing)",{"id":412,"depth":875,"text":880},"Byte-Offset Field Reference (SignedHpkeBlobV1)",{"id":795,"depth":875,"text":882},"Associated Authenticated Data (AAD) Binding",{"id":841,"depth":875,"text":842},"Complete byte-level specification of Chinwag's +1,408-byte hybrid post-quantum RFC 9180 HPKE envelope (X25519MLKEM768 + HKDF-SHA256 + ChaCha20Poly1305).","md",null,{},{"title":141},{"title":236,"description":884},"zXEUt5u1-1rdqzAsZT5SbFtVPPssUbKfwMXO-zPmvlI",[892,894],{"title":132,"path":133,"stem":134,"description":893,"children":-1},"How engineering squads run 4-minute Friday calibration scrimmages and bridge anonymized 20-byte MO-GRPO counters across the zero-knowledge wall.",{"title":145,"path":146,"stem":147,"description":895,"children":-1},"Why Chinwag enforces Sign-then-Encrypt-then-Dual-Sign (INV-VERIFY-BEFORE-DECRYPT-01) so untrusted network frames never reach the ML-KEM-768 decapsulator.",1794371826571]