Encrypting agent traffic with zero external dependencies: X25519 + AES-256-GCM in pure Go

Every encryption library is a dependency. Every dependency is an attack surface. When Heartbleed was disclosed in 2014 , it affected an estimated 17% of all TLS servers on the internet. Not because the underlying cryptographic algorithms were broken, but because of a buffer over-read in a widely imported C library that most projects had never actually audited. Then in 2024, the xz Utils backdoor showed that even a compression utility can become a supply chain weapon when a determined attacker qu