tnlrt

✓ Browser → bridge :443 (SNI extracted)

✓ Bridge → agent via QUIC :7878

✓ Agent terminated TLS (your cert)

✓ Agent → nginx :80 (this page)

Bridge never decrypted your traffic. ADR-003