F28-TO: Yes
Rationale
The originating Tor process selects circuit relays and builds the circuit through them. Native path constraints and the control protocol permit explicit relay-path choices rather than only selecting a destination or access interface.
Assessment method
Primary documentary and source assessment; no new runtime test
Source context
Primary specification or selected-version source; bounded composition assessment
Outstanding qualification
The witness concerns the locally constructed circuit portion. Onion-service communication combines circuits through a rendezvous point; the sender does not choose the remote service half or hidden IP-underlay hops. Guard, family, purpose and relay-availability constraints remain. Control-port access is local privileged authority; arbitrary custom paths are not recommended anonymity defaults.
Public sources
- https://spec.torproject.org/path-spec/path-selection-constraints.html
- https://spec.torproject.org/control-spec/commands.html#extendcircuit
Editorial evidence references
The following identifiers refer to research records not included in this public package; they are not public links.
- round470.html
- round470-sources.json