Why should I trust your cryptography?

You should not, particularly. What we can say is that the surface is deliberately small: Ed25519, X25519, AES-256-GCM and HKDF, all from the standard library, with no custom constructions anywhere.

There has been no independent audit and we are not going to imply otherwise. The protocol and the implementation are both public, which is an invitation rather than a defence.