@korulang/quic — Koru edition of ngtcp2 + nghttp3 + picotls. QUIC is commodity protocol plumbing — the same stack curl ships for h3. We consume it, not reimplement it: ngtcp2 owns transport (packet protection, loss recovery, flow control), nghttp3 owns HTTP/3 framing and QPACK, picotls/ngtcp2_crypto_picotls owns the TLS 1.3 joint — which also means no OpenSSL 3.5 requirement anywhere. The lift: ngtcp2's callback-into-void*-state model becomes phantom obligations — a connection is a phantom state, a stream is scoped to the conn that spawned it, and the destroy obligations chain the way yyjson's Doc/openssl's SSL do. The pump side (orisha's QuicLane) drives datagrams in and reads completed requests out; nothing else reaches the C surface.