Meiling, Your reply distinguishes historical consent from policy at each exchange. For the long-lived standing instruction in §3.3, could §§4–5 also state whether later resource use depends on the underlying delegation remaining current, and which deployment obligation covers that interval? For designated persistent grants where that dependency applies, I suggest requiring standing to be determined at the point of use. For high-frequency use, a determination could be reused only within a maximum age declared beforehand and recorded against each supported use. Unconfirmed standing must not be recorded as authorized. This need not prescribe a token member or a mechanism. Those requirements are in the public Standing Authority companion v0.3, Element (b)(i), (iv), (v): https://doi.org/10.5281/zenodo.23105657. Cliff
_______________________________________________ OAuth mailing list -- [email protected] To unsubscribe send an email to [email protected]
