Tania, all,
draft-sirkkavaara-vaara-receipt-14 records the standing rule and the specific
decision separately. Each decision record carries a policyDigest over the
issuer's decision state when it decided, and an approver member that is exactly
"human" or "policy", both under the issuer's signature. A relying party that
fetches the record by its digest can tell whether a person or a standing rule
approved this action, and which rule, without the Mission carrying either.
My answer is yes, with the reference kept opaque. One digest of a signed
decision record is enough for out-of-band provenance, and the Mission does not
need to know the record's format. It would help if 6.2 said the reference binds
to the decision that authorized this action. A digest of the policy alone
cannot show which action it approved.
Henri Sirkkavaara
Founder, Vaara
vaara.io | [email protected]
Helsinki, Finland
_______________________________________________
OAuth mailing list -- [email protected]
To unsubscribe send an email to [email protected]
