F30-RA: No
Rationale
The selected normal-DIF service delivers SDUs through application flows. Its SDU-protection boundary protects and exposes data on underlying flows; the application API delivers data and peer naming information, not a portable authenticated object with origin-verification evidence. No object-signing or trusted content-reference layer is included in this composition. It therefore does not supply F30 object authenticity across storage or delivery through a different connection.
Assessment method
Selected-service boundary assessment from application API and SDU-protection architecture
Source context
IRATI application API and software architecture: SDU Protection
Outstanding qualification
No applies to the declared composition, not to all applications or possible RINA policies. An application can add signed objects above RINA, but that would add a layer absent from this column. This decision does not deny available channel-protection policies and does not resolve F06 or F07. No runtime test or cryptographic audit.
Public sources
- https://raw.githubusercontent.com/wiki/IRATI/stack/Application-API.md
- https://github.com/IRATI/stack/wiki/Software-architecture-overview
Editorial evidence references
The following identifiers refer to research records not included in this public package; they are not public links.
- round657.html