E03-SC: Yes
Rationale
SCION v0.12.0, commit e6b0576682c73845a185f14ea68e8b0923374874, publishes the router, control service, dispatcher, daemon, endpoint tools and local PKI tools under Apache-2.0. Its README gives a Go source-build command for the deployment binaries; go.mod identifies the public Go, crypto, RPC and database dependencies. This supplies a complete open software path for the selected IPv4/UDP-underlay, SCION/UDP role with locally provisioned topology and trust; no proprietary Anapaya appliance is mandatory.
Assessment method
Documentary source and dependency review; no new execution
Source context
Versioned primary repositories and official documentation, 2026-10-15
Outstanding qualification
Source-availability finding only: no new build, runtime, interoperability or dependency-license compatibility audit. Go and component licenses/notices remain applicable. This witness does not replace the separately scoped JPAN D01 witness or add end-to-end TLS, production provisioning or a security certification. Optional gateway features and test tooling are not needed for this role.
Public sources
- https://github.com/scionproto/scion/blob/e6b0576682c73845a185f14ea68e8b0923374874/LICENSE
- https://github.com/scionproto/scion/blob/e6b0576682c73845a185f14ea68e8b0923374874/README.md
- https://github.com/scionproto/scion/blob/e6b0576682c73845a185f14ea68e8b0923374874/go.mod
- https://github.com/scionproto/scion/blob/e6b0576682c73845a185f14ea68e8b0923374874/pkg/snet
- https://docs.scion.org/en/v0.12.0/overview.html