The server now produces a 96-byte Ed25519-signed delivery proof for every enqueued message: SHA-256(seq || recipient_key || timestamp_ms) followed by the server's Ed25519 signature. Clients can verify the proof using verify_delivery_proof() in quicproquo-core to get cryptographic evidence the server accepted their message.