> Iman, > > Thanks, that is the case I meant. Your Gate test covers one half: the > executor refuses a changed amount. The other half is evidence a relying > party can check without trusting whoever produced the signoff. > > The verifier side of your case is already in the published suite: N2, > changed subject, refused with DIGEST_MISMATCH. What it cannot show is > that dispatch used the parameters that were verified. That is your > half, and it is the ordering gap the suite declares as N11. > > So the shared case could be: one approval, the amount changed, refused > at the digest check, and refused again at dispatch. If your Gate ever > verifies a PSEA token directly, the 31 cases would be the > interoperability check you mention. > > Mohamad
_______________________________________________ OAuth mailing list -- [email protected] To unsubscribe send an email to [email protected]
