Routing/error fields stay clear. Content is X25519-HKDF-SHA256-ChaCha20.
Python router + Go sm-leaf reject missing to, empty ct, plaintext body. Summary logs never include ciphertext. MODULE.md.