[OAUTH-WG] Re: draft-chen-oauth-agent-authz-use-cases-01

Blake Morrison <blake@truealter.com> Wed, 26 August 2026 10:55 UTC

Return-Path: <blake@truealter.com>
X-Original-To: oauth@mail2.ietf.org
Delivered-To: oauth@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id B5DD512F99FAC for <oauth@mail2.ietf.org>; Wed, 26 Aug 2026 03:55:44 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1787741744; bh=PrG3HAVHhDGNt/yVPqcanAjM88wnLoI24Ftz86PRQVs=; h=Date:To:From:Cc:Subject:In-Reply-To:References; b=d7dhBmg4YE7kMYGR+8jFXndCDTiKyKUUrb4TZlTzoqAH+LP0MdFzigJ6OFYGkfsMX xl9FLfKIyDVKv5FWZp9/thijHBTLFJ0XwDvTP96FJSLcxY6J224seOadQCpz+3Gebi V6+noyOj4r/9KCP4lvkx9/NYB9vHpkuAwTIhOIPo=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.799
X-Spam-Level:
X-Spam-Status: No, score=-2.799 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, RCVD_IN_VALIDITY_SAFE_BLOCKED=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=truealter.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id P2aaLt4Vy1Pv for <oauth@mail2.ietf.org>; Wed, 26 Aug 2026 03:55:42 -0700 (PDT)
Received: from mail-4399.protonmail.ch (mail-4399.protonmail.ch [185.70.43.99]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 678A512F99FA0 for <oauth@ietf.org>; Wed, 26 Aug 2026 03:55:42 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=truealter.com; s=protonmail; t=1787741733; x=1788000933; bh=PrG3HAVHhDGNt/yVPqcanAjM88wnLoI24Ftz86PRQVs=; h=Date:To:From:Cc:Subject:Message-ID:In-Reply-To:References: Feedback-ID:From:To:Cc:Date:Subject:Reply-To:Feedback-ID: Message-ID:BIMI-Selector; b=UjW1ToL75ptOz6tKVqUrOdB50RWjRSzR1GsYswRZrTK9FRoCeKAaf09yzNy9pMOfp w7F0sR9ihm4KnTKnkUfPlcz49Imz9vPw1o/VMMQC3ABi8nazvivalswn8TJe2hw+P/ A24tuQubKSnxtB780W3OZwH+qdhvr7vH/HpWAx8IQhyfD99gdrnq5MLamyLutXIVHv PzBDbv7oQwkdll7gIjM8teR3vjTf5qda2QfigdGQzAaxdzUkn4eBv1l1DM9a8/AJkH bD/h924ZhYjvelLZtKK34fNnNs2NZwvCRa6GJYxj+dkiTJw2mWH/JmRx66RrnVfjwL diFnIlHrR1Dcg==
Date: Wed, 26 Aug 2026 10:55:30 +0000
To: oauth <oauth@ietf.org>
From: Blake Morrison <blake@truealter.com>
Message-ID: <KxJZaXVF3vpVPB54Vvaz5LU7WIcstr7u5OOHsdQ-Pa6bVYd8Qnzetj_dk1BfuJnUUS9_tQeIwGgh5NaFZIWLwj-jkGBzkOGWBzr0khzMgdE=@truealter.com>
In-Reply-To: <202608192326133080434@chinamobile.com>
References: <202608131756296188747@chinamobile.com> <9L0cpfDVzipJftjAaFRsqykbCDusifvPWcBKITSH5U_MSdzhgz9XlUgXsphJi_Mg_9hEMPIND_O4Z54jDatDbnzAd7UVEfiYRVx6O17GkCo=@truealter.com> <202608192326133080434@chinamobile.com>
Feedback-ID: 187617253:user:proton
X-Pm-Message-ID: 9cf347f56302bffb8ccfc65e1cb5efc8cddfcfa9
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Message-ID-Hash: LQ35DD747Q3YIXCPSNFCFZTSWJF3ZXPH
X-Message-ID-Hash: LQ35DD747Q3YIXCPSNFCFZTSWJF3ZXPH
X-MailFrom: blake@truealter.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-oauth.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: Meiling Chen <chenmeiling@chinamobile.com>, "drew@truealter.com" <drew@truealter.com>
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [OAUTH-WG] Re: draft-chen-oauth-agent-authz-use-cases-01
List-Id: OAUTH WG <oauth.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/sOQSxzmzOe-tKklvrag0Rx00RVE>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Owner: <mailto:oauth-owner@ietf.org>
List-Post: <mailto:oauth@ietf.org>
List-Subscribe: <mailto:oauth-join@ietf.org>
List-Unsubscribe: <mailto:oauth-leave@ietf.org>

Hi Meiling,

Both gaps are in the repo now so nothing is outstanding on the dangling
requirements. Thanks for opening 28.

One thing survived the fix and it is in -03. In 4.2.4, UC8's What's
Missing heading renders as two literal asterisks with no colon, so the
three gap bullets under it lose their label. It is the only one of the
eleven in the document that does. I'll raise it on the tracker rather
than here per your request.

Best,
Blake


On Thursday, 20 August 2026 at 1:26 AM, Meiling Chen <chenmeiling@chinamobile.com> wrote:

> Hi Blake,
> 
> Thank you so much for taking the time to review the draft. Your identification of the dangling requirements in UC8 and UC9, along with the formatting errors, was spot-on and extremely helpful. This is exactly the kind of detailed feedback that makes the document stronger.
> 
> We also want to take this opportunity to say that we warmly welcome this kind of review from everyone in the community. The more eyes we have on the draft, the better the final result will be, so please feel encouraged to share your thoughts at any time.
> 
> In your email, you mentioned that you could open these as issues. That would be incredibly helpful, and we would like to encourage this for any future feedback you or others might have.
> 
> For the specific points you've already raised, I am happy to open the issues on your behalf, crediting your feedback, so you don't have to do the work twice. Going forward, if you or anyone else spots an issue, creating a ticket on the repository would be the most effective way to help us address it.
> 
> You can find the issues page here:
> 
> https://github.com/Maisy-ML/Agent-Authorization-Use-Cases/issues/28
> 
> Thank you again for helping improve the quality of the document.
> 
> Best
> 
> Meiling
> 
> chenmeiling@chinamobile.com