Sean, The "autonomous things are not human" is your distinction. But why that distinction is important enough to bend the model to exclude identities of people that aren't acting is still not clear. The only rationale I see is legal - you can sue people and orgs. What other rationale is there? Why is that marginal distinction worth throwing out the idea that a person has the same identity whether (s)he's doing something or not?
On the other hand, you dismiss authentication and authorization as irrelevant but in the real world autonomous individually-identified processes are authenticated using managed identities every day. I feel just as strongly that process Identities, in addition to the "what" product names that we call Tool, need to be included in the model. The model as we left it last week does not get us: 1) Person identity independent of role, and 2) Autonomous Actor (DoD Non-Person Entity) identities, a thing that has been managed and authenticated and authorized for decades. I don't give my consensus approval to leaving those for future work. David On Tue, Feb 14, 2023 at 11:44 AM Sean Barnum <[email protected]> wrote: > I think the key disconnect may be that when I say “what” and “who” I do > not mean class vs instance the way you have used them for a Tesla below. > > I mean “who” meaning human related (“what person or persons?” ( > https://www.dictionary.com/browse/who)) and “what” meaning non human > related. > > Tools are not “who”. Processes are not “who”. Bots are not “who”. Email > addresses are not “who”. SoftwareAgent is not a “who”. Etc. > > Those are all “what”. > > I think it is very important to maintain this semantic distinction. > > An instance of a “what” could definitely have specific identifiers for it > (serial number, pid, etc) but that does not make it a “who”. > > > > I believe the consensus compromise from last week gets us what we need for > now and allows us to discuss, evolve and mature in the future. > > > > sean > > > > Sean Barnum > > C – 703-473-8262 > > [email protected] > > *We are here to change the world!* > > > -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#4965): https://lists.spdx.org/g/Spdx-tech/message/4965 Mute This Topic: https://lists.spdx.org/mt/96815530/21656 Group Owner: [email protected] Unsubscribe: https://lists.spdx.org/g/Spdx-tech/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
