F07-GN: Yes
Rationale
Signed ephemeral keys authenticate the final cryptographic peer under the selected known-key trust assumptions.
Assessment method
Documentary analysis and explicit selected-profile inference; no execution
Source context
GNUnet CADET handbook, v0.20.x documentary baseline
Outstanding qualification
Test known-key mismatch, replay and channel authentication in the pinned executable; handbook evidence is not a runtime audit.