Add methods to ensure TLS security protocols are enabled

Introduced EnsureSecurityProtocols and EnsureSecurityProtocolByName methods to programmatically enable TLS 1.2 and optionally TLS 1.3 if available. This improves security and compatibility by ensuring required protocols are set at runtime, with logging for protocol changes and error handling.

WelsonJS.Augmented/Catswords.Phantomizer/AssemblyLoader.cs

@@ -198,6 +198,10 @@ namespace Catswords.Phantomizer
                     throw;
                 }
 
+                EnsureSecurityProtocols(SecurityProtocolType.Tls12);
+                EnsureSecurityProtocolByName("Tls13");  // Add if available
+                // EnsureSecurityProtocols(SecurityProtocolType.Tls11, SecurityProtocolType.Tls);  // Optional legacy compatibility (uncomment if needed)
+
                 AppDomain.CurrentDomain.AssemblyResolve += OnAssemblyResolve;
                 _registered = true;
 
@@ -716,5 +720,103 @@ namespace Catswords.Phantomizer
                 verified = false;
             }
         }
+
+        // Adds protocol flags without overwriting existing ones.
+        // Safe on older .NET/Windows where some enum members (e.g., Tls13) may not exist.
+        private static void EnsureSecurityProtocols(params SecurityProtocolType[] protocols)
+        {
+            try
+            {
+                SecurityProtocolType original = ServicePointManager.SecurityProtocol;
+                SecurityProtocolType current = original;
+
+                foreach (var protocol in protocols)
+                    current |= protocol;
+
+                if (current != original)
+                {
+                    ServicePointManager.SecurityProtocol = current;
+                    Trace.TraceInformation(
+                        "SecurityProtocol updated: {0} -> {1}",
+                        original, current
+                    );
+                }
+                else
+                {
+                    Trace.TraceInformation(
+                        "SecurityProtocol unchanged: {0}",
+                        original
+                    );
+                }
+            }
+            catch (Exception ex)
+            {
+                Trace.TraceError(
+                    "Failed to ensure security protocols ({0}): {1}",
+                    string.Join(", ", protocols),
+                    ex
+                );
+            }
+        }
+
+        // Adds protocol by enum name when available (e.g., "Tls13"), otherwise no-op.
+        public static void EnsureSecurityProtocolByName(string protocolName)
+        {
+            if (string.IsNullOrEmpty(protocolName))
+                return;
+
+            try
+            {
+                SecurityProtocolType original = ServicePointManager.SecurityProtocol;
+                SecurityProtocolType current = original;
+
+                try
+                {
+                    SecurityProtocolType p =
+                        (SecurityProtocolType)Enum.Parse(
+                            typeof(SecurityProtocolType),
+                            protocolName
+                        );
+
+                    current |= p;
+                }
+                catch (Exception ex)
+                {
+                    Trace.TraceWarning(
+                        "SecurityProtocol '{0}' not available in this runtime: {1}",
+                        protocolName,
+                        ex.Message
+                    );
+                    return;
+                }
+
+                if (current != original)
+                {
+                    ServicePointManager.SecurityProtocol = current;
+                    Trace.TraceInformation(
+                        "SecurityProtocol '{0}' enabled: {1} -> {2}",
+                        protocolName,
+                        original,
+                        current
+                    );
+                }
+                else
+                {
+                    Trace.TraceInformation(
+                        "SecurityProtocol '{0}' already enabled: {1}",
+                        protocolName,
+                        original
+                    );
+                }
+            }
+            catch (Exception ex)
+            {
+                Trace.TraceError(
+                    "Failed to enable SecurityProtocol '{0}': {1}",
+                    protocolName,
+                    ex
+                );
+            }
+        }
     }
 }