checkpoint: integrate authenticated transports

docs/IMPLEMENTATION_CHECKLIST.md

@@ -1,9 +1,10 @@
 # Implementation and acceptance checklist
 
-This is a coordinator checklist, not a claim that the items are complete.
-Mark an item only with code evidence, tests, and an integration result. Record
-the commit/test command or issue beside each checked item. A feature marked
-planned in the other documents must remain visibly planned here until proven.
+This is a coordinator checklist, not a claim that v1 is signed off. The current
+runtime has code paths for all four carriers, configured auto selection,
+client reconnect backoff, and local control commands. Mark an acceptance item
+only with code evidence, tests, and an integration result; record the test
+command or issue beside each checked item.
 
 ## Milestones 1–6
 
@@ -14,17 +15,18 @@ planned in the other documents must remain visibly planned here until proven.
 - [ ] **2 — QUIC DATAGRAM:** certificate loading and hostname verification;
   client challenge/response; datagrams; keepalive/MTU; reconnect; multi-client
   handling without core API redesign.
-- [ ] **3 — automatic selection:** `mode = "auto"`; direct UDP then QUIC;
-  bounded probes/retries; auth rejection stops probing; jittered reconnect;
-  status reports selected transport.
+- [ ] **3 — automatic selection:** `mode = "auto"`; configured order across
+  direct UDP, QUIC, HTTP/3, and TLS/TCP; bounded probes/retries; auth rejection
+  stops probing; jittered reconnect; status reports selected transport.
 - [ ] **4 — HTTP/3 CONNECT-UDP:** standard CONNECT-UDP/HTTP Datagram semantics;
   authentication; backend mapping; reuse QUIC infrastructure where practical.
 - [ ] **5 — TLS/TCP fallback:** TLS listener; client authentication; bounded
   big-endian length framing; bidirectional datagram reconstruction; fallback
   integration; expected head-of-line behavior documented.
 - [ ] **6 — operational polish:** Unix control socket; status/stats/reconnect
-  commands; config validation; systemd units; capability guidance; certificate
-  and configuration reload; benchmarks; fuzzing; installation docs.
+  commands; config validation; systemd units; capability guidance; benchmarks;
+  fuzzing; installation docs. Config and certificate/key reload are not
+  implemented; the control command explicitly reports reload as unsupported.
 
 ## v1 completion criteria (spec §89)