Cursor: Apply local changes for cloud agent

docs/src/roadmap/milestones.md

@@ -141,9 +141,16 @@ encrypted-at-rest options.
 **Goal:** Replace the MLS crypto backend with a hybrid X25519 + ML-KEM-768 KEM,
 providing post-quantum confidentiality for all group key material.
 
+**Status:** PoC complete. `HybridCryptoProvider` and `HybridCrypto` implement
+`OpenMlsCryptoProvider` / HPKE with hybrid KEM; `GroupMember<HybridCryptoProvider>`
+via `new_with_hybrid()` runs full two-party MLS (create, add, join, send, recv).
+Unit test `two_party_mls_round_trip_hybrid` passes. Remaining: optional CLI/client
+flag to use hybrid provider for new groups; interoperability note (hybrid init
+keys are non-standard until MLS adopts PQ).
+
 **Deliverables:**
 
-- Custom `OpenMlsCryptoProvider` with hybrid KEM in `quicnprotochat-core`
+- Custom `OpenMlsCryptoProvider` with hybrid KEM in `quicnprotochat-core` (**done**)
 - Hybrid shared secret derivation:
 
   ```