Participant Relationship Protocol

Back to matrix

K01-TS: No

Rationale

The selected WireGuard key establishment uses Curve25519, without a post-quantum KEM or additional preshared secret. Tailnet Lock signatures do not change payload key establishment.

Assessment method

Primary documentation review; no runtime experiment

Source context

Tailscale documentation and WireGuard protocol description

Outstanding qualification

Documentary capability of the declared profile; no runtime, security or global-scale certification. Tailnet Lock limits key-admission trust but does not replace managed coordination.

Public sources

Editorial evidence references

The following identifiers refer to research records not included in this public package; they are not public links.