[OAUTH-WG] Re: draft-chen-oauth-agent-authz-use-cases-01
Blake Morrison <blake@truealter.com> Tue, 01 September 2026 09:49 UTC
Return-Path: <blake@truealter.com>
X-Original-To: oauth@mail2.ietf.org
Delivered-To: oauth@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 47C3B132ED402 for <oauth@mail2.ietf.org>; Tue, 1 Sep 2026 02:49:56 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1788256196; bh=qDfId+cm62RvWfaAw5Q1US7yTAnqX613WnXN+xOBZDA=; h=Date:To:From:Cc:Subject:In-Reply-To:References; b=FxJtpF5ktSGZnRxoDqHQwix8mMAhy8FPZ+i6nX68D7z8fWc3cZcE5auMHKFWekz0e GCSSWP/cRoqAtzEZtzhKvrnk6EC7gW5HxTLwE0kDxtLwNtajQu3QMrLgl0RNbj8X4d NT0AuBDAYWaFBQT4+It76uP/JYf6zACjIkweuCt4=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -1.548
X-Spam-Level:
X-Spam-Status: No, score=-1.548 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, NEW_PRODUCTS=1.249, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H5=0.001, RCVD_IN_MSPIKE_WL=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, RCVD_IN_VALIDITY_SAFE_BLOCKED=0.001, SPF_PASS=-0.001] autolearn=no autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=truealter.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Y3R5NMup7KrU for <oauth@mail2.ietf.org>; Tue, 1 Sep 2026 02:49:55 -0700 (PDT)
Received: from mail-24421.protonmail.ch (mail-24421.protonmail.ch [109.224.244.21]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id C8167132ED3FE for <oauth@ietf.org>; Tue, 1 Sep 2026 02:49:55 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=truealter.com; s=protonmail; t=1788256194; x=1788515394; bh=qDfId+cm62RvWfaAw5Q1US7yTAnqX613WnXN+xOBZDA=; h=Date:To:From:Cc:Subject:Message-ID:In-Reply-To:References: Feedback-ID:From:To:Cc:Date:Subject:Reply-To:Feedback-ID: Message-ID:BIMI-Selector; b=KXyqcuJAgqvuCVoLye0WkjOfTvwrIYKRjTjULyeg4gP32rgSozfxAt3I/ORAOHoR7 J6odUWW7HrPoYhBPyN+GrqMxbqSspu1gnKwslg9UGMq3HfLPFL5axVoaxhPOQcdE1C lUvOdeAjlcw7YWuzpw+igl+7hSwOzJLNFwbCb76hu9LdAQXLSF8Ez/6c9n4s3e4JnT /LQ0dFeNne2iqaoP4m9Wdi3wv1om6kLv/t7/GVdCYt2KcxfyLYPUGHWzPSWbg/jXOV 3a56PtZFkJCNMKoZLDUnYkoPihsI21fLNcdn4fKtmKl5s8bM+va3LGlhpXFM/yBRk1 n2eccOAnDvnLQ==
Date: Tue, 01 Sep 2026 09:49:48 +0000
To: oauth <oauth@ietf.org>
From: Blake Morrison <blake@truealter.com>
Message-ID: <uFUdVd4ymd8Qnw8v79SbTrDk3JfEageC9rnj1yeXcCEUyeFBdNBgX_pVty5jGfcMs1BT9JmpQ1BeXQDZ8BjoGxSjOJf5ZIVjIVzm7pGY_is=@truealter.com>
In-Reply-To: <2026082717561838216122@chinamobile.com>
References: <202608131756296188747@chinamobile.com> <9L0cpfDVzipJftjAaFRsqykbCDusifvPWcBKITSH5U_MSdzhgz9XlUgXsphJi_Mg_9hEMPIND_O4Z54jDatDbnzAd7UVEfiYRVx6O17GkCo=@truealter.com> <202608192326133080434@chinamobile.com> <KxJZaXVF3vpVPB54Vvaz5LU7WIcstr7u5OOHsdQ-Pa6bVYd8Qnzetj_dk1BfuJnUUS9_tQeIwGgh5NaFZIWLwj-jkGBzkOGWBzr0khzMgdE=@truealter.com> <DS0PR10MB740501DA4B187587F691DE07DBAE2@DS0PR10MB7405.namprd10.prod.outlook.com> <2026082717561838216122@chinamobile.com>
Feedback-ID: 187617253:user:proton
X-Pm-Message-ID: f04d6316089e186b771032e14b3f273f0c766af9
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Message-ID-Hash: 2XGNZSWXKJEFRWMFE6TGRT5ITWGM6ICG
X-Message-ID-Hash: 2XGNZSWXKJEFRWMFE6TGRT5ITWGM6ICG
X-MailFrom: blake@truealter.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-oauth.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: Brian Vicente <bvicente@sanctumsecops.com>, Meiling Chen <chenmeiling@chinamobile.com>, "drew@truealter.com" <drew@truealter.com>
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [OAUTH-WG] Re: draft-chen-oauth-agent-authz-use-cases-01
List-Id: OAUTH WG <oauth.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/aVeBr1H9Q3LP0uw9U0xndsYixVg>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Owner: <mailto:oauth-owner@ietf.org>
List-Post: <mailto:oauth@ietf.org>
List-Subscribe: <mailto:oauth-join@ietf.org>
List-Unsubscribe: <mailto:oauth-leave@ietf.org>
Brian, Meiling, Thanks for the independent read. Meiling, checking the rendering before the next version is the right place for it. Brian's first suggestion is the one that generalises past this defect. Recording the rendered symptom rather than the source fix is what makes an issue uncloseable without a re-render, and it survives the particular fault being fixed. A source-to-render mismatch is invisible to review of the source, so nine issues can close correctly against source and the document still ship the fault. That is what happened between -02 and -03, and it is why the check belongs on the rendered artefact rather than in anyone's review habits. Brian, yes to the gate configuration. Send it on-list rather than off, since the class it catches is not specific to anyone's draft. Best, Blake On Thursday, 27 August 2026 at 7:57 PM, Meiling Chen <chenmeiling@chinamobile.com> wrote: > Brian, Blake, > > It's indeed a formatting issue. Thank you for the suggestion. We will check the rendering situation before the next version update, and the idea of a brief "verified in rendered output" note is quite good. > > Best, > Meiling > > chenmeiling@chinamobile.com > > > > From: Brian Vicente > > > Date: 2026-08-27 06:48 > > > To: oauth@ietf.org; Blake Morrison > > > CC: chenmeiling@chinamobile.com; drew@truealter.com > > > Subject: [OAUTH-WG] Re: draft-chen-oauth-agent-authz-use-cases-01 > > > Meiling, Blake, > > > > > > Confirming Blake's finding against -03 from an independent read, since it is the kind of defect that survives a version bump quietly. > > > > > > In Section 4.2.4, the UC8 "What's Missing" heading renders as two literal asterisks with no colon. The consequence is not cosmetic: the three gap bullets beneath it lose their label, so a reviewer landing in UC8 sees three unattributed bullets and no statement of what they are gaps against. It is the only one of the eleven use cases in the document where this happens, which is what makes it easy to miss in a diff review. > > > > > > Two suggestions, both cheap: > > > > > > 1. The tracker issue should record the rendered symptom, not just the source fix, so that closing it requires re-rendering rather than re-editing. > > > > > > 2. Since the -03 announcement lists nine issues as resolved (#15-20, #26-28), it would help reviewers if the next revision included a short "verified in rendered output" note for heading and table changes. The class of defect here is a source-to-render mismatch, and issue closure against source alone will not catch it. > > > > > > I run xml2rfc plus idnits in CI on my own drafts specifically to fail on unlabeled headings and stale front-matter dates. If it is useful to the authors I am glad to share the gate configuration off-list.
- [OAUTH-WG] draft-chen-oauth-agent-authz-use-cases… Meiling Chen
- [OAUTH-WG] Re: draft-chen-oauth-agent-authz-use-c… Jia Chen
- [OAUTH-WG] Re: draft-chen-oauth-agent-authz-use-c… Meiling Chen
- [OAUTH-WG] Re: draft-chen-oauth-agent-authz-use-c… Blake Morrison
- [OAUTH-WG] Re: draft-chen-oauth-agent-authz-use-c… Meiling Chen
- [OAUTH-WG] Re: draft-chen-oauth-agent-authz-use-c… Blake Morrison
- [OAUTH-WG] Re: draft-chen-oauth-agent-authz-use-c… Brian Vicente
- [OAUTH-WG] Re: draft-chen-oauth-agent-authz-use-c… Meiling Chen
- [OAUTH-WG] Re: draft-chen-oauth-agent-authz-use-c… Blake Morrison