drop tls handshake log · detect pqc/classical mismatches · runs locally
drop tls handshake log · local only
heuristic screener · vendor schema varies · not definitive proof