Archived criterion

C08-TO: Yes

Archived previous-definition assessment — revision 4.72. Retired in 5.73; excluded from the active matrix and counts. This historical verdict is not a current assessment.

Rationale

Tor relays free circuit resources on DESTROY; forwarding does not require retaining a final-participant history afterward. Select transit relays without traffic logging. Consensus data and current relay descriptors describe infrastructure, not a mandatory archive of completed communications; onion-service authorization records are endpoint state.

Assessment method

Documentary analysis

Source context

Primary specification / explicit profile inference

Outstanding qualification

Trace circuit teardown and inspect relay logs, controller events, statistics, crash dumps and storage. Optional operator surveillance is not prevented by this capability. No deployed relay or forensic audit performed.

Public sources