Hi Azat, I reran your verifier at d813114 against the bundled AAT-02 corpus. All 229 vectors agree in the existing presentation/array checks, including the denial-step and tracked replay-state checks. This uses the bundled oracle, not a separate implementation.
For C6, I added seven small issuer/key-pair regressions. They cover a shared key under two issuer names in both orders, wrong-issuer and wrong-key controls, and a key-rotation ordering. The paired negative control places the correct issuer and the verifying key in different anchor records; it denies at 3k rather than combining them. All seven pass without changing the verifier. The small attached bundle contains the test, patch, results and reproduction instructions. Would these be useful as regression coverage for your stated interpretation while the draft authors clarify C6? Best, Songbo
<<attachment: AAT_C6_Anchor_Pair_Regression_20261102.zip>>
_______________________________________________ OAuth mailing list -- [email protected] To unsubscribe send an email to [email protected]
