91eef089dc
processCommit now detects ExternalInit proposals and allows the sender leaf index to equal tree.leafCount (the new joiner's slot), matching RFC 9420 Section 12.4.3.2 external commit semantics. MlsKeyPackage.decodeTls no longer rejects non-0x0001 ciphersuites so that interop test vectors with other suites round-trip correctly. https://claude.ai/code/session_01LpR6qsF6nep1RnXA9KbXGs