Add: H3 support - incomplete

docs/WORK_ITEMS_v0.3.0.md

@@ -3,42 +3,43 @@
 This is a practical checklist to execute v0.3.0.
 
 ## 1) probe/trace upgrades
-- [ ] add `--per-hop <n>` and store RTT samples per hop
-- [ ] compute loss% per hop
-- [ ] add `--rdns` best-effort reverse lookup (cached + time-bounded)
-- [ ] improve hop formatting + JSON schema
+- [x] add `--per-hop <n>` and store RTT samples per hop
+- [x] compute loss% per hop
+- [x] add `--rdns` best-effort reverse lookup (cached + time-bounded)
+- [x] improve hop formatting + JSON schema
 
 ## 2) http timing improvements
-- [ ] implement `connect_ms` and `tls_ms` timing
-- [ ] report `null` + warning when measurement unavailable
+- [x] implement `connect_ms` and `tls_ms` timing
+- [x] report `null` + warning when measurement unavailable
 - [ ] keep current `dns_ms` and `ttfb_ms`
 
-## 3) optional HTTP/3
-- [ ] add `http3` cargo feature + deps
-- [ ] implement `--http3` / `--http3-only`
-- [ ] define error classification for QUIC failures
+## 3) tls extras
+- [x] add OCSP stapling presence indicator (if available)
+- [x] parse SANs and key usage / EKU best-effort
+- [x] add `--show-extensions` and `--ocsp` flags
 
-## 4) tls extras
-- [ ] add OCSP stapling presence indicator (if available)
-- [ ] parse SANs and key usage / EKU best-effort
-- [ ] add `--show-extensions` and `--ocsp` flags
+## 4) ports conns
+- [x] implement `wtfn ports conns`
+- [x] add `--top <n>` and `--by-process`
+- [x] best-effort PID mapping with warnings
 
-## 5) ports conns
-- [ ] implement `wtfn ports conns`
-- [ ] add `--top <n>` and `--by-process`
-- [ ] best-effort PID mapping with warnings
+## 5) cert baseline/diff improvements
+- [x] baseline schema version
+- [x] match by SHA256 fingerprint
+- [x] diff categories: add/remove/expired/changed
 
-## 6) cert baseline/diff improvements
-- [ ] baseline schema version
-- [ ] match by SHA256 fingerprint
-- [ ] diff categories: add/remove/expired/changed
-
-## 7) optional LLMNR/NBNS
+## 6) optional LLMNR/NBNS
 - [ ] implement `discover llmnr`
 - [ ] implement `discover nbns`
 - [ ] bounded collection, low-noise
 
-## 8) docs updates
-- [ ] update README roadmap
+## 7) docs updates
+- [x] update README roadmap
 - [ ] update COMMANDS.md with new flags/commands
 - [ ] add RELEASE_v0.3.0.md
+
+## 8) optional HTTP/3 (last)
+- [x] add `http3` cargo feature + deps
+- [x] implement `--http3` / `--http3-only`
+- [ ] define error classification for QUIC failures
+- [ ] keep feature disabled in default builds until stabilized