Phase 1a: protocol, schema, security primitives