F16-LP: Yes
Rationale
A configured ConnectionGater rejects authenticated Peer IDs through InterceptSecured before admission. A coordinated cutover first changes the allowlist, then closes all connections to the revoked Peer ID; the declared no-resumption profile prevents bypass through old tickets. Gate-only updates are insufficient. This is a composition of native policy and connection APIs, not an application login protocol.
Assessment method
Documentary analysis; no protocol execution
Source context
Primary specification / explicit selected policy
Outstanding qualification
Pin and test the chosen go-libp2p QUIC binding: serialize policy change and teardown with concurrent inbound/outbound dials, cancel pending deliveries, enumerate every connection, and verify reconnect rejection after cutover.