... encapsulation** Generates public/private key pairs and securely encapsulates a shared secret using the recipient's public key (via ML-KEM-768). The recipient recovers the exact same shared secret using their private key. Keys are tied to short temporal epochs (5-minute duration by default) and automatically rotated when a new epoch