F06-CG: Yes
Rationale
Selected final-pair BCB-AES-GCM encrypts the payload; forwarding nodes are not given those keys. This is a configured end-to-end protection scope.
Assessment method
Primary-specification analysis of the explicit composition; no execution
Source context
RFC 9173, BPSec default contexts
Outstanding qualification
Pin and validate a compatible executable BPv7/SABR/security composition. Documentary capability is not integrated runtime or conformance evidence.