E03-YG: Yes
Rationale
Public Yggdrasil commit 422836eeb21a99790caa286aa63d493bbc4766d7 explicitly selects Ironwood d50055b11f5ec5b56ee4e56ba9a75261461821dc in go.mod. This closes the revision-binding gap without substituting Ironwood. The source includes core forwarding/encryption integration, TLS 1.3 transport and the Linux TUN adapter. Yggdrasil uses LGPL-3.0 with an additional linking permission; Ironwood and phony use MPL-2.0, gologme/log BSD-3-Clause and the WireGuard TUN dependency MIT. Public Go runtime and module sources supply the remaining software dependencies.
Assessment method
Documentary review; no new build or runtime experiment
Source context
Primary source and versioned dependency review, 2026-10-15
Outstanding qualification
Source availability only, not a fresh build, runtime, security or license-compatibility certification. This witness is the pinned commit, not v0.5.12. Earlier version-scoped findings are not automatically requalified; selected TCP/TLS and Linux roles are retained, without Windows or optional QUIC transport claims.
Public sources
- https://github.com/yggdrasil-network/yggdrasil-go/blob/422836eeb21a99790caa286aa63d493bbc4766d7/go.mod
- https://github.com/yggdrasil-network/yggdrasil-go/blob/422836eeb21a99790caa286aa63d493bbc4766d7/LICENSE
- https://github.com/yggdrasil-network/yggdrasil-go/blob/422836eeb21a99790caa286aa63d493bbc4766d7/src/core/core.go
- https://github.com/yggdrasil-network/yggdrasil-go/blob/422836eeb21a99790caa286aa63d493bbc4766d7/src/core/tls.go
- https://github.com/yggdrasil-network/yggdrasil-go/blob/422836eeb21a99790caa286aa63d493bbc4766d7/src/tun/tun.go
- https://github.com/Arceliar/ironwood/blob/d50055b11f5ec5b56ee4e56ba9a75261461821dc/LICENSE
- https://github.com/Arceliar/phony/blob/530938a4b13d/LICENSE
- https://github.com/gologme/log/blob/v1.3.0/LICENSE
- https://github.com/WireGuard/wireguard-go/blob/ecfc5a8d5446/LICENSE