Negotiation stripping & transcript binding · RFC 8446
Delete one line from a TLS ClientHello and watch two post-quantum-capable endpoints agree on classical-only X25519 — then turn the Finished MAC on and watch the same strip abort.