F21-PN: Yes
Rationale
Wire-v4 HS2 authenticates both endpoint identities. The endpoint API exposes a provenance-bearing peer descriptor: Strong ID, public key, relationship/session references and transcript binding, only for an open relationship with established session. Application I/O is attached to that relationship. This supports reusing the authenticated final-peer identity without an application login/token exchange; it supplies neither civil identity nor application permissions.
Assessment method
Documentary/code analysis
Source context
Primary specification and application API
Outstanding qualification
Endpoint API/code review at c6bdd443ab031c55f5ed25c3c2d2615d9227d5a3, not executed end-to-end qualification. Bind the selected carrier to the final E2E relationship; test wrong-key rejection, reference mismatch, receive provenance, close/rekey and stale identity caching. Descriptor flags explicitly do not assert a remote identity generation. No universal application integration or transit-anonymity certification.
Public sources
Editorial evidence references
The following identifiers refer to research records not included in this public package; they are not public links.
- index.html#round053