I think that's the second point in the list: > A big part of the contact tracing protocol (which was originally the DP3T protocol) is implemented by Apple-Goog

I think that's the second point in the list: > A big part of the contact tracing protocol (which was originally the DP3T protocol) is implemented by Apple-Google in a part of the system called GAEN. This part has no available source code although the law requires disclosure of the source code of all components of the system. Since the first point is separate from that, it must be referring to something else?!