D01-I2: Yes
Rationale
The Linux Java router can be launched directly by the supplied runplain.sh without a privileged service wrapper. Use user-owned installation/state and nonprivileged NTCP2/control ports. The selected numeric bootstrap and destination/tunnel processing need ordinary TCP sockets, not route configuration or raw packet access. This does not test the private bootstrap configuration or its reachability.
Assessment method
Documentary endpoint/profile analysis; no new software execution
Source context
Primary documentation and code reviewed 2026-10-15
Outstanding qualification
Documented dependency/privilege witness only. No live deployment, permission trace, interoperability or performance qualification. Preserve the selected communication and privacy configuration.