PQ WebPKI paper: certs alone aren't enough, so it formalizes context-closed auth and a two-plane LRp for smaller warm-path bytes.

A paper that notices WebPKI auth is really about certificate context too, then builds a two-plane post-quantum scheme around it.