Your TLS Stack Is Lying to You About Zero-Copy

In a zero-allocation runtime, SSLEngine becomes a structural mismatch. It keeps TLS on the heap-facing side of the JVM, makes cleanup less deterministic, and breaks the off-heap ownership model.