Mint a fresh Zeq-SSL credential for a state machine you administer. The secret seed is shown once; the framework stores only its SHA-256 fingerprint. Mode A = pre-distributed (intra-deployment). Mode B = first-touch ceremony (cross-deployment).
Tally cost: 1 ZEQ per issuance · Audit handshakes default-on (per-credential opt-out)