L02-TO: Yes
Rationale
The already examined Arti commit explicitly offers MIT OR Apache-2.0, including the tor-hsservice onion-service provider crate. Choosing Apache-2.0 supplies section 3: an express royalty-free patent grant from contributors for licensable claims necessarily infringed by their contributions alone or together with the Work. README contribution terms apply the dual-license policy to intentional submissions unless explicitly stated otherwise. This meets the same implementation-bound, holder-scoped declaration rule as the other L02 positives.
Assessment method
Express patent grant and implementation attribution; no legal clearance or runtime test
Source context
Pinned official Arti repository, README and onion-service crate license metadata; reviewed 2026-10-17
Outstanding qualification
Credit the Apache option and covered Arti contributions, not the MIT option alone, C Tor, third-party patents or every independently written Tor implementation. Patent litigation alleging infringement by the Work or incorporated contributions terminates the grant; other license conditions remain. Optional differently licensed components retain their own terms. This does not assert that all selected Conflux linking/resumption mechanisms exist in executable form: E03-TO remains No for the complete selected composition. No protocol profile, maturity, interoperability or patent-validity verdict changes.
Public sources
- https://gitlab.torproject.org/tpo/core/arti/-/blob/3adfc4b052b6520c12f6193c593c5557fa5f3771/LICENSE-APACHE
- https://gitlab.torproject.org/tpo/core/arti/-/blob/3adfc4b052b6520c12f6193c593c5557fa5f3771/README.md
- https://gitlab.torproject.org/tpo/core/arti/-/blob/3adfc4b052b6520c12f6193c593c5557fa5f3771/crates/tor-hsservice/Cargo.toml
Editorial evidence references
The following identifiers refer to research records not included in this public package; they are not public links.
- round376-sources.json