From cbce0a60b1b93478f7ec0edc9c76933ff1f98951 Mon Sep 17 00:00:00 2001 From: Jeff Lombardo Date: Thu, 16 Jul 2026 13:28:42 +0000 Subject: [PATCH 01/11] Referencing WPT --- build/openid-wise-profile-1_0.docx | Bin 0 -> 39471 bytes build/openid-wise-profile-1_0.html | 220 ++++++++++++++- build/openid-wise-profile-1_0.txt | 418 ++++++++++++++++++++++------- openid-wise-profile-1_0.md | 11 +- 4 files changed, 544 insertions(+), 105 deletions(-) create mode 100644 build/openid-wise-profile-1_0.docx diff --git a/build/openid-wise-profile-1_0.docx b/build/openid-wise-profile-1_0.docx new file mode 100644 index 0000000000000000000000000000000000000000..b422de96704a29c6951ed0371c79f609e1257f18 GIT binary patch literal 39471 zcmY&Ro;I?ov~PhQWb=LO_7p569mk_}(x-@c(StCSpdE*AdnihX0e}I=yO%#`cq9-&;Fc`8 zsmW~rKnv!=<0+h3xPZ~w#9ed280tDCPbb~or$A1{i``?(rWGLs%+@uI#AT@q@tC|N zGfTPI(0zrdExDayQ$+g3Xrs_JQk07b2}Lu;{5VWi8P(*mhP)%+ky>JXvZTV1l3Eba z$Xq*>E~t&=q~ghQMiNtyj$h}qES!Bp@K&kw8O;= z?H&G;vuMe8|5soQWu~Gk`y7X+!>oOMkH+%O0j7xlwcB)gxOEVIp-^{kzm34 zV*Rkgt%+Bg*>|>q#Q_9adhvj%d|$Nb2X%`VUTz(|Q7g#wZJ+oHkN#WtBsK&cp>=4j zW%+QGl^AGM0gsWbIOe-gxj!x=mB;h66Jj<~TW;Y3I^6=NP3(V&=(`UdPFo}5g>0B* z4qCQjBs4uuDdV7@Gmv8}fi>3v1CLXQh0olY<-K-qk z+1dV6R)dsPpgB=wYO#E`uW^th%53?|G`tbgp!H&{=?b3JcO=>Ykd%34D8?Ryhqt#W z`_FEdttUU+T{&$s_*fax=nU}vP?NG2_u#>wb7A7LOc|M|n)+0ByO z(%Hh(@!vxJ&k8>8K6cxc1F^jX|D>uKu40{6N|l4yXi!}yOw(8`J~85v*S2a+NGJ{! zQ(tAjFk@O02%kU`gH72J{PW{x zkPBhSnT;*LB38E}_@bs>GRUxPO96dU_VQzA?0&NOkZ9#m-kM6f!w$)b#~!ztvCw%(?tpoPrWbaIJl-@&YtYL-FwKyS=D6z}_} z=7CS_?(4S8gpo8-z$4EQ`3xV6!Ch3)=%kWrFq7U^vz3-jXcumTiEwwRXCz;P;V1b0 z3A(tb-QFqa4PWX*R-|gx^z71*{pFX)bXY>d?0lB&=EnrOw~ko~r|~a#Bg-v{X@5~r zusT%WZmlQu=YDi^bl@3ahdk&_N+#eIFR=ZGaiQU~v0l;NRU%?MeRl=um>H21O0ERy zke5Ikz!T=jZ~weaZGs0Y0v6-io3`Nocv!#7nu8AO4r9Uv!*{aZB;PMD>*v!rf7e~) zsRqC3dcGXCuC%}oA{{&=or$)ReNrnrykuh%zn&vMi>y@1NBa@9i6*N?eBP&QZ+Bim zKf9Ux23@Vv_M-kFG*k^P5H)G{YI8g4JbRqPPkg;q?XVcm4N?p&7(98zT{@NaIt#vM z!T#u?|DSUn=B|2g^?WIa*4 zfx9|PVHYAI*&54dO|rcb1oCYNxUo*AOQY-jq;2AtJ7zB2fi$9-FnzS4B6E*&3GsOC zs@DDi8*wlu7T|GsJS=HA_>}Z-#-F7w)+_3Mp=lR@WO*OR;|;1(Z-wcG9;)BF z&X5lzn-|qCd0BpWBO7e@7tI!Q&KDoqPJT10Yc1ITNBr7J!>&3KWVSw`vuXvF8T@7c zw#N;Z_ix_7aSy`+#h~bEa7VNAjR{+xK&F@MA2SAN=mu zQ7|co(7;2+7jEm~roWt;#~A*$ip!9$3L#=-#5`~_OrJ27Ge2Yh-XK=sLMJDlF;UHZ z4IQ~0?Y=|&mmddQ7VH#2W{wNL_>bpNl zr?NK*NhXlIT{8AEXx4JFQa;ibUr)t74n@r1yEBcqyJa$hpey2&VppV`0z;U)*Fa!j`f#xuf^0csfN z^DBXrmIfu~&xU-g>5q}6M&G;p=gmba;_v$)d}j}I&vWvp;H4%Csh{80Q-E1Boi>UF z8_}z0IU4{9R4=FZF~kA16>POXks<>3Y#B!ZFt1;wqc`0~F)7a&i%R${F(QXNkLu}b zQ&cNwAg7YN(RSfhm!OD=!<$r9JAqFApM#SQ|A@9993&oDSn-hk@u}nFGnO50 zx#pih56KPc`C&X;+}Y99laSGrbU<8`RWdS}cZV8XHOWQu3Ou7IjN#ssQ^m==v2Ia%5BMVIkjUN2YwV*VEtgSKocyW7XLGHdIOaaa0kq1ZJ5EJum#& zIH>1EpDm5%oNoY=i4>){Ivhy-f%ZU54HqZJMWU=RS8tC%PJW4$zt?=*Z$4+)4>@J{ z(0h8KrOQdSGi#LfsH{zhc8J`SfhPOjZ@IRNe^4ZPp}Oxh{P`ICncL6_)c=`U1NnIY z>k@glAwBJq1M!sPQQnzHTwW=GdP>n`a($4bU)Wz365$vAmCJ1a_jRy={CuTu3Uz01 zgqZuqZRT=BkT}@>6H3M+Iba)=iM#Ih^ZD}M1x;v#0WhZt+I_wfbW9 z(!F@^CpyxDQF+VZVT1R3SAO6ls&@iy{NI^9Om84llZ4GHqquDv7LDm?QU5mv@zz); zga*gUF(mMwDRXXs{E*ZbIHQajhSb&fu0f8BRaPi7*(>VRR@O1iOKY{MkWW%5kytH9 zs#V+#!Wc7z*Ny&`^8)%;bXgL$jTJ+(udGCh3lKxGUCbXV#u9A-<1?QwimX{@oK%!w zPGWFmlw2WkQ+UhK_9oiEal~qZTtV|j*5OEQQU~DFo9uuYQ^lYg8+aDzz+kTPQ21*; za1vs)kSCS_mZm_P7DyCR#K}wfN%jZ>gW?V{+S(CFm6L2$38i>049&?pt2n~((hPItjiG+kytYgkYTHUEdI|!A z|MCRwS4m#>@NtNZtVYvyno5e&Vg&zGlEwc3PMY2Ll}%YK7;!sA znZT6cDQ8Y<v&;&N0?g zTGW|Nf&+B;DYmDoiEOOi-e;mZ|O)t=QObv0Ub*`CpH%>}k>tnf;bz1{&td2;GRpSIZDgx;H5Lci5M&%lHqWap%yRCf*bAt< zvqgm1L1q0Z!?7J(YL;n0w5O*x0a)%ws+d`gD)tCmai3BbTaZ@j*+NA>$Yp-ztyVz4 z!L3x^4Vq}bu(*M!k?mqUD-lee{Z)Pe!?y?I*{=}Xm(#70NqFVN{_brom2&bI!4GpS znKu;Gmqr;_p~60gTduAdmwM60yy+#`%Ri#{KI_)~GnP`rgm3li_z2+yb0vv4|6LEe z?08qlifGIhMn3$vS{ixHGM_fM+V3rkdkwN949!xG8;bi{56r`Tq+1O0JU7|qY8z#Q zZ&_K!*=pkZt+kNa=lhIN72@QOg+A7A%mr%W0z!VaS>dRba6q8bD&|}x-O1{C%!a|p zJP<;vYM%&Bvlscd=paB)UjR|wX&7T{PF)fNB%cbV$Nsaj6B!BUZKcparo>+LCOnU^ zh_{vH$#+8$1iSQ}bE1G{3Gn3v!s8YwU%%O-7?b$vBrTSMghEY4xAVN4HmTbZFz74J z#Z^*AuqH|n#~!sUzU-iAMKvZ1<^?+2qQ~4OQXff$;E*Dn3k(7-D%_ly+FKJX@wFu{ z%D;H`{1xoMrL4BJS5@bGuT-KR+29xi=yczd%}_aMu-@i)DA`!Vs7b&e$476cyn}?| zD;;(heMi-728l1~|E7(EjF+H|c`I8ysiN09=H%bu6-5?@2d)NDuR#w2WdS7O^aD+3 zg8(uaWt|L5D?wn@h)u$(k8L~aDY|jc%l?GNysTQ(jEc~PMgF|yP@z@{%4&m*g>Cd# zd^B^qkIYdBP(F&TEBq1n$e-_tF79JlfCLl`SY$jAsk-fg;ShAJ^#p<&1 z941bwJnj7VTJpPo-fJhvVJt102q(11rwAVXFX`i2G=zr*ypir>PZ4_cb%Hq(u)M;G zGqHVSLOAOdk9wQqu2k)r^_C(FIB!#pWS)g4Lr>s)*CLbb0?d3|r?wF!-Nfn9V$3n4 z5=t_Q<3tnY&<&%Yu2fl4iC_CRNn1u}KPb`#X?C%QBxrqnLIGz44VrzyiR*yjFut|j zZssIW29RI{rFu~zI?*86mxZLSfTh+~@zvf>I5+TKP`kXsS?%1dxMftYJmKTAK~J3Z$ozcNFyXK( zdzL&?!@Fj&oY~S2EgI`Z!Nj|1Xb|+r50r!LTqv<5+PIXo0-e8T(^PAx+520$4T}ug zF8JQR3!};*acHvhBlkl)=Y!B#CXl2a9|~nbF3&y5>a6QX~_bK zzitoWf;d|eXUVG^=jA(P!u0L2?tR?uTfYx@+~_f`K-cdgzGRt3ck)#2eZ0GOvsZmU zh5ioy8Ll)iDQr&$w<7g1jD9sPOV+}#b|4Z){$f4qjo+Vw#@j%-S`--=(Q8g!G?WKP zSTeGoJu7&(RFgE_XJq#^D+Z4&OoWw6KfAD#mQZYttAS(?P5HYH_;35Hg*C!S{Ruc6 zaPwHW51a2K>zQlL!vQ-Dw|+|Hainmgu~j61eySFAo~L3jXTYX??|&sR9=M%@WJNwHIgT^V*2uCF?e+_-s)E33)Dz;- zua4M<`$TZ09zRhi%lK_Od46PkUAB1f(%4Oy#H}EoLa3k=lKR3Ob+jFVqho)tTs*2( zAD+#MZ10RN2!}k;*-a_Dn2chxWs{y@4Jk-T+j`_`)l-fp64>7E zpD>zdP8)moRaSe?F;H^L{nn&=z(kCB4nBj=1(zSgr(?Hv>}vJYx@zWaz|H2z^HS2- z;^AqlCkeJqE6_qCalb`J&O~rxi1}$0Ss5g!H?(OM0k<=g}F?v6z7V8{>j}Wtb}`g zyHEq23-~z$AksIB z%0hYCV~10BvMHo!Q8GNIp8)tw!`t6y6+`Z*n~D!| z4yt9ySopwjytZ;kh=Oh_Q}CR zh=Gj&rFm2xecorWo_?3{o_ub3L}Gl58Y;~JzRq!$od$eIezo`{zM8V&Ude9YEX{@oA~zWsat?D*Y``89EA^s^wZv(v!LT6hdYT-OL!ZPDp7cqd^^9daUpYH}qdl9+ z(_7Wt%hB0YodT@$cy{hB-Z^)>*Sl~QE1{*nsb8piu$qyVTP+<3EJn=@x$+caHheLV z8X$KmrZ%=47QksplXR;!8L?QyDU~oVXr=;F(?NF%A>6PBx1=`O`9@cQ@*)v4`30V@ zpH5>6lg&HDf;oDhMR=3m0G{`{|97hwDbq^IyW)j-b}1_dZ5W+gB7crS6drO6exkEf z#eC|v&G8~a(&|w?#v{j6KcFsFF4nQOZB{o=`^HB#DB$m1J93Tfa7mMkqlO~>X1`vj zQFWbd|HCPqCIcd?}dJWKWQX3R_yw4^z6k>5X za^Jcl9946^N+8A7H@`V4pqmKW@khphT+s?5l%TxJnb4o4Q&GB|GJZRgKb$6;Tk;5dR8Z>wjCPn3=$K+8JVD%4G{+7}{ zC{zq7v@YzpstlkJ6tOh7wSlj(%YF_^Zlo$vplfu4&gJ?f-Vpgh`}ZSLIom+py|I==X&Z!Fix1hpJL*XVyE;d=bVQE=zF#y09X( zS2nF38#>4kCTuYlB{2DB>>@MVC zK_5k8TUe7*ECF`@UoVh-o3_nPG1~kbvidFu$PSIA8Sv( z>D5A6^N)SNbCL~8U&HEluG6KHNMP6ADWL^hp_(jHE3nc$k?<|G39%vUVwq=-=Yrtf z!}C@26EI_Uazc^4)5&bbk)aU9)F4Bw?qH{vJZ8p1$U97Yz7ZC}FzLF8rarMM8zQ;9 zKn~M?LZ&7{;EEFH2#aEHF6l6l65fYlsA8wF&i|`~hA7nEo+>6X2jQzZeVAV`w)nwe zc^gPqw0K|rcZ)2fWx?ZuZKAruk(_4f`fL-du>xvInhAelP(M>Qiw3;vDMp@n`B_wQM7nn`|1w(-IbVn4VZH|6ZsJa=}Y&yVMisBQtw zEL~m2O(BQz2@1W}|DP?k_;HAa#x_cFv}Gi$FVZ7tbNkgFm`IoTp0!~>V2Eao`?UbB z5T{lV>4Mgm-{Mq4%UE&6EOA~HGkg%fa29WVlRI;b$LJW0R*X6M^xxNWB?qLC@gmY9 zn#N47i9Yh+YWb2#F{Ll8z2-bp@V5bT_O_#F5~iWm5t@bCfXPu}n|5UEB2O7f5=QUJ z+%DH{t&qpn=gH(zDf2rNM~k9^Z)|Vyx%dGh9+3z1k%%ai*^&rX2OF$-W{INCq$_kE z^;0NrM95>ctrQs?3(P?|N?CvmAC`FX#!F0Z1w8LK|*+q6c~Ioua)Q%<;_4j@yyPYFar~Dz*(vXi``eIJ82d7uaNWez?AUb@)S!RACQJVx$0qg&+P)E z!;uz3e)fT7zpARN%I5U9srgp(;FrbVrW4S+|Iy`PQT*0fYgTKHfJEbZmiJ{1?V)Ue zBVUk*AnpVg?!eDd0sY>&d7vgibAKT;oI&ld&~a^5pjTWnup_B09xkqlgPQfl%^mhC z&~L$qtkbdTFyC^qT$oJL9Cgwb4Nn9>Dv+j?Mahg`MQm#O-UksJ*q2q?E4o+;2nZ`6 zloPn59&BN-`69oGidH*Qs!qE)o2Q$*ZJd9trf#ZRRI5__k%6S?u5^3NaP6_Tpyvqc z(FrxiM-x`os!Rr3xA}`Q=dmlur?>{|rGaE}3TVt>UU}%l0Dv4fPpnQcc?Z*8(3nq~ zfXMwKmwrj1$EEGyia~2jcVRRr_3kB97MR*5r$#0sz?;c+yT$PSSe?XQi1qOceHIs(2dhoM1A-L#A{tc7zD^a zrTOJMDoSMB_-m#h-ksnPd5G+ag-3cySfP`*QUdrp!`20fvEZ>F4}{^wfW$0wKu~ZH zcy>7ete>LfpV(bk2upjtz71Vjvd`tPX;9zz+%Z0ToN6Ba6M1%a)xs)0g}4b^7~WgW zTHAxnFTmYYg6c606P#I_8v2zR5s@NgiM>&k{8?PQRwRnKE~Km2HrmxVrWG2RVPueq zN+Dm}Hfk_%T1PM@hYNOAlTI+kfAZFCu4Bm^1CsU@H!+g@sM1rC9z-Sy_;U>1ie>>d zE-;-fk3J8VQ$`VWnt{Ot*<2CiS>=pSYiyw(xg=a!1RV3PNL?qOtDc5!&U}kigmi0gzqY zOgwo`z8d_*G=0u`6Y6~d5j=G$`SVF42)1q7G$@41bf#Z(ASsByz#A3i2PtTID+Lm? zjVA`oHGUYMC;or(kw$N6kJ%}h?9vo45g~dx7CaX2z_VKp3i{$lXU0x=w%uyt72m+D zYturWBkL6tJ}8R}wmPL*!qck zZb7>y<5d-cdGU87Z}}44fb>T({Ol;)uE?jUqQ$Hvcd%^ty+F~UTOGbLBSnolrlGMg z9y4J=`?Y&W3;38p%`d(&=HPGi?KUE}gD1_b9-bD$7|7yCpA~56XL-$lWzulNxf-PN zo#OW`70dIGLFsh_z-ET)Dc{xt>vM5@uKw9cJiQfv*2dM@8_vejRpOhZzx(t2qL})& zN$-4A;ZpPj3d4_e3$D4B_XF8GQ)TZ}m*~|Cwl;?h`nM5zK5>+8GcLvy4RkeaC!H5S z&)hOaA{mA%e*D{OsiDTKp$Tz%26?C z-u`#=m^a&SqhNy<$a;7gb$4oYz$mJ32v-Hp7nffT_Eu^nahda-cY0dK?UkA3FQ7&R zjl=r&kL%$KO`elTGktW5Wz8=YdyY6x^2ecRv9g;r5#Z*qTgaTkiSs_~e~ivtkE-Kg zQIah34R4!@ZKGqne6Ju@)>?f9M7a2@F%v7FrvW!X!RE@s)666VG$8soMDaLdB}tg7 zLZ2k3zFT&I$5_9BVH#Z!6O;uu8Ist`gMgu|4U%A$rQ2CI&4R<)q+uv9X8A=DZkTM! zQ5;u4thmMcg86y@58LA}P4rQP_d>}f4lft|ePByUp9l0;i!$3OzZPzwt)V}UqD~1I z)l(7a5(D+^Ppu^-%ko=X4&4!*OrY3r8zI=Yn8@Yt9>|Eg0XkGiT^JeKM0!OYXnH&t za6eGtU@z>XiR#Mmh)$8}MtAp>lkExe54AgIJ0dZNaNvSGi71PNy(4DKSY!~29l)?z z_=8U{etC235eTGqU{WP-4hcfnrwB|YqxP^6f&Bk70`Ps$w|?fI%Vzy)0nb&j$Oa^o_UT)I<(&&FcP7nC?-!KE>DU} zn&>=O%;7?p{@INF?MQ?qPrDM<))(!_r&Dd=W2-nkheoKwHU%|2=ZQ%^XT<4sWIavA ztQ5JwflRE1zAokegntZL=&!T=I#*TS7KI2O&xq96VAGeBLil`mPaB4d?y6(`_X~9u zyAd@Nh0qD(v`9AvmOggu{a=Z4&*3w?K1oy$4a~46UfOtFrCtWMh?$tzvnORJ&F(H_ z(r28y$QAx&4S$61XX2whx2u`OJu}sMSonPf_^H5d4%+C=#Bx7bkQpJ=>*^JlPWw}J zDfLNMf3;UOAJ)V)8537;Sd|an#4>y{B$&gc>(=cESg65m$Sb1k2#Mnf5}{-)W+5sd z6QyC6aiDGPJz&a4Z)S=xB;H#3i*Fy<$arpI>a+y}Ezh{)lh? z7Nbuny2KslU!x$hIS|K0b=twCQdNmZv!rbW2|mS4=!Bqyymg)RPkh zs+cBKs9=H@lgCa{>px(GmylmH=S;m*D@|{Kru{9)LC;|OcN`a{w49!yysk4Hj#gV$ zZ4NuNNt=Pu;*p-=7*XNHSW;f~`9J|JU4Xt}S4pYgadrhU`3DwP7M!I59FB`vNrx<^ z|5~LTAKYjabT}A!lm%X9f;!&l(C;PG$l2~+aVhr#sU9Yz?Qp+P(jGDy(HmpPP}dUQ z54+~2R_X#VXZ|BIK(Azpg@wCWO`{aFK6DMv#Qt(C(bWJybB>tH=u3~jnl@)q2{p@d z^8wFhaFUb}5SoL61F^}<%CH{h0e^f@xZk-I#Xq%Xa;!#_lw25_kM+~3Z@r^Y-0yLz z2hzboKfd*0lUlDiky39FO1GL0wVx>K(Ud0a9)SY5B!E+yd7AYbDHFC#N|`9G*~!nA zncrA~K^7vmX^K*xx4zSa*=5;&F1f0CMhSo8UVl6vLKhp}61B2E%ZW0U$5qC=nj)c! z4)s_a`Itj!S9jBhG_Cett)pFP!lhV9YG+>gN*SBz8g<%$J7a|JQ$P}oZ8k#l9iifK zPW&H5dK`M1He6<#108M?xvW;&PqF3>A8u1YfP#f-&PgN{uiOXKuT6|wAU>|Q5hWCo zjAAGNDS@P0Lvg1p1St`*+07#s;{_Fw4MFJ$CD9VtMz1uAh^=u*BlsQBR>h%e%Rov6d#L%B-52$e8NuvzFytbf(KeOA!a)R0 zdFfy{kjCJw+X+pcY87${NV7)9dSP4pa}5VXqjOTEB8slyroHC>QgRB}TpG?Q*hlw)n_5S=*E!zk9W5y7$H*u!*n5hR$q z6O_pRnT8$zo+ zY#r`y@-LTzKFbKrHr$tHj@b!IZHkAVJUh3|UnB+FQNlgigemMDmaTo~?%J&k`=f@% zqxU%J^Bk$uQNYy#QZ*nGO?y@MiZt{F@}S4$RPzxE#zClM(B%t~ z!e>-(<6LokVu0lt;7@V9tIj9fHY)w*&SgTNjKO}V`5^_1q^th2x%gUjJ`aK-Ys8TB zac#oEZ9I*Pmp^IFpz{irreYexh&y3 zSNWRKMA6NZ0lmRV&9G5gksuv(Y#~B4EMr_D;@H^3GLHOgmt%y09xrGXwKY#_Y)#L5 z7NC>nB1pFz69_vP_N!?&Vvpv{{zwD*>4#)0=b3MfF8ThI6UI4Q*JxFuM_L48?se!VL~+H?*rxcuYUgR zW1{XId+jyiK_tI>UE1H8M6L5a!H~pYDH3ShArZfe*kP>tZx3yijqO?^@GxvJ7|vfG z1dOlFo7^|H(}Wo5rU<^jv4l)EKGu-%@g|8#4W-Ez?2H#09V-08$ANwzf}{u*VW$ig z%ClUCiyC2(@Ps?RhZ2#hg(0$o0}8RF7sm6i-+M&Pk%^9092;D4Bz$m`Vn%>J8zm!* zXO1xJ@ElI=CT}5T&f09d=8$;BD8c-luEKva5N zKAv$fUH`u%kF zaBAk{;vI!>1zL@+Z^NH6`dWY+5$cKrmeamy-3F_e$m>b2D{PJoLS%VM_{W|+FGhun zSZJ<1+lmvicG~AbnOf%RxuIKfmPg({KvNfpss%3SJG5>UOy0Obtv#@vKt{Ys6n(#l zs7K_JTI$ZqVjwJ-McQ+YBQV2P&;Mnd>D67LI#E>Pmi3pXv>zyqLD$!)IPLKy9U+o9K@UQXwNG9nE;FhJb%BeWF2|>2#ovozW z_duo=#cO99*=ehDbuuEzs?TP4TC;os4{T#cPgN4>A4)nlx&wGD7iV(K*p1rAKSJOKN-s=lzFelJ`Fejnk~Y36REDo9KJ7Z<@w9g z#?T__+xlo<9|ILSEeUQ8aN+L#b49DFgg(-k?8sI9Km7Yn3|truKS(h#4C0|H8QOzD zQzMlQq-yY?loAY46>YjE?C5-V8SbHV%a+{xl)a&CpSTj0l(6E@e;?lL@a6j;d1SE-JIB zh9AaC@DYXxzPOn{32cIzmR|ne@AUo#e`R9l6$jJ5jiB1|c7^x5CiwKX$kw;qU~hLJ zN$Bcr%~}7q7{{W5Tx;?bXKfY5*08vduZ546NwfY7o8dEG-RksO!C<)WwO*xi)>M39 zst*MHBcyaWUK;oqC$TB>I(dn%t!4ih-6NM4D7{hZpVejsIF`(#;SabD#ztfs5eAcZ zp!ImNNoTQjd9~zrbrnRUe;+0ozuXkmC{8XSX&DIaR1uN>-6c|0tNVSXYKy4m$5Pq^ z)2vkRy9ovpio4S2W^aUk z4nsy{reXLJuW&~QtFp|4MaNYGLPD)*h)LxHin58MQqON!2s1MSZ{*j{XWLL~6JV5I zZKU9+X%d+D#ndpOS5u?^kHFp48eOf98Q3^HL3If2Uq49`ARKXR^Y7&dKC&IUjWJPpsRvq*0B*F53bF(>uI<(D4pnP!mq~w$3E5GE%`i`u zq5kOkus@R0L{*J=ppM5;eA6)ry_#oSA>|lEoMl2R^}Z;hiY_1PqR$z_kbT2@pc8=) z>cHT@z1w`1u!PJKQ#smdi%0zMFY&nfFbtjyC3DKE2iq#Z5l8d0c2S~yYnkNUcxIfD z{=AW{&I@F|t2Ciadk-7hGXbh6$Dj&^{(wkYr z%xLkNC!7~x(G+nBY2ZKo1D@Ug=@Cg=A{46EJL$(7YtoN7_N&;kIpJ^ff_uY=-pKupj8!nIlzvCpKeMIXhr&h9XTeu8wyqB*v@Ye*-L=)kcx8gUgKFf2jLm z0F^?^CDIPKDkClRBKzQM_9xu1UpKfxo4_9_3r=4q8k*FK9w#QViyqJmq6=?-4o7C& zQG+`7olL3)T38FnGs-12aQAM|4nzumQSQ*fZe`j?Xt)RtGGB9=^)=JEf%@8u0rpqp6fe@S1gK2=P3Uig!I7n zV2vcT(4WU(KhZx`{h_i3M){jP*Mj5Z0r}GuQ0$2LkAs+NX~NwOQdoCWSO@JqlypESO2(moS9AAms+jtB-JZ>Pi!kn)v1LU5x&_KZ-Lk*C71FIE{{i)oWDTxzpb zOQZCbR^h{CP)LIN2thrdEci&hYGm|KGEI;GZsdv5qFm^41wLM=E$kQ+a?g`CNM*oY z^vY17$Z7r4g6S{Se54v;YT0w~WCUxNwEJ`h*SNqz$$q%Dl0%rLo3ZFgJHej<8)<8y z+JFE2xE+6Bty!j&3Yz>EQhJ7VU)`?uUv=*x3;=&8XfF$FWEGN5T>^Zs0b$_1;cLlU zwN&|w>}=-P@R?owpAhaBZKGae#Rsz$sK?`BBB(paU@$p9td#^yu1tJM?z(i{t&KRB z!GvTYSp-=-K%W)+CM6+|Tx1n&4*NhCrIAK=c1hfV#yrEi(g8vi($*g{A$0QgyrSZW zxSoZfF#jc$D1~*S?X-=Z>)CMdZ9;38YRWA+Vq9G7S}8dKaT^>;rNrv_S_I^yM7V8Y z3OC|+=b{u~82DyW%4xR30*3g)qjdO(1Lx5=EuX~<)pLu z%I@5+!x~dx1oW-!Ci$d`>Dq&Whe}zP>b9E-tx4T2oO$JYvDD=vHBD=@@;(hLMhKJE zLbbgjX1g;E@KxqNhEv4g{4m3DOdK$2XGoDwD)zFDFdG=C$iJqb8dA##f(W)wD4P1( zdB4j_L7#Fyv?UD)QB%b;9Lr)@!O(Bjb&^QtRZRusC3Ii`)Ox4|>Gqrpf@3il&5EIA_th?h@R@#MMJU$8SM94m#r-d?`P*)KWxaG z9E{l02=xv9Lzx9oKFzg}1OlUO!?kPjk3a{_cFE9KD#QfYDlW$^jz`q#Q&He3yt4of zlG?+?`&PRq{b2^zo6PyI`PU+- z7Lkw5NKJU~7&&7_K))-SxKk^8p?NHeanDnFF{HW(4NpeVUbaN;G=MI+_^+BNpy9*W=;w??7)ie-$yw0Er_WY|;tk6`RSVcrraG1TU^UU0N6w_FNV zR7KhQm2$?sSQvrn+UYz8T>xe|USkBT=bf@8_BoOz_U&q7%2Zr|deLYT;Fg5!6JIWi zfYCi}+Gipq8|Ph~E(zy*YZ%k?_Zce|rz^~vpNdHACfEW(xWyH&V+knV^54F2Tz zfjZ(1|Fo{Zg}SCrH73*pv$o;gtIqt+?>AK~@kd_T-<@>b)wMD$J^Z<09$)9fO^KV| zxnA!u1N+@G3(TX!B}dPu0{hTt>pDUAoXv>?o7%uv9qdl$<_#&NOsPFv)^v(augoqO z+h0_Pc2IR6#T$O4dF3q9d+W^4dRCi$yD}LVmT|Mc1#dk}hqaT&a-?fSW3~zb-%uTI zXE@J6A&(27R#ht78mbm;+jjBXv4}k*%ipsYtm69gxB>{W>I?b?H$G%f6-D!q7a%%P zPBNp3AsAY05O&@o#qolH6B@w`Uw<9TmDygNOae`2@Kn3Hr`?Ip3Ycy<*0x=n9)viC zxNeu2Y10!CRfdQ`*VS8bH&-pks(j|L=+=l%i_N6VkZ0_tAJMY8`v^~AVo#kZWFRI& z5di{v6>XSqGEwKnhQMcjnNncBff%nC)JYna_I_Y)tmQ9q>wbM~C8v&Lw%7_b=nzps z0RmAQpkh7GB(MuLngD$AjI^sK`D9&sW<=vR+O`oA@O!$)B( zmdU&Uzo8wben`ho`l##`>5>oP`VRUinp9abovbv|^9kGeqaAU?rFM%ZxMfUA3O8lLxfh4y+J*pyFGoO^+l!}2%)h-&o}%oN?HQ5g(^8m z`76;J8y1{wRh^3;u_bKkB^B9d56B`b`^MX0je(xN5rE*0>Uq|dee}nb8~RPaW`Z^t zUU|{f0-6G4!LLNq7@mXkGNwSBEsU_ZG%-6WdJQkKLu|E((I-5o0EZ0bSxM`lfZf+= z_=H-WKS;x;d%Ql=<5Vy9on#R3Ezj0FNqg5<{fBGx8kTMc7LfveQE8a8Q@qmD$!8gNpDbeZ8bH6()L-xB37Y^Z6=_VCT7B$TDY zb_ASC(@~ywfp;8}V>Ad*sVV2d_vbDe#9F=Kh*&E-jPoTZcxwkziQ%yqt)^Ej7^qfz zw<0hskEGG&0rL9Gd20Q*VYC`opO)Nx(Q1#PsJg8G`biNavMHFr>Z@5$pnY1lNZgpw0 zdZ~M}SK)Qei7tM{U;L_C92259qbdHdK#|Be`V*f%pkgd>&cYXwceQtV?v(L!RcF2iL&D zGj_}QR`{-n0RGj-^QG(TE1vZLNu1%x7}vI#7gB-k|CMk=R1WgT65W>>w(*ufYD+pD z+6EoG@r`E3=Zi|~LDqGjKEQGBkb~gHxy$Rco~Y`Lxse+d!upS{;0{`40;NHj6hPGX z((aN>3k_`C68|;pD^w+>D(>={TWsPr-E4-3%}$Cx`R_~S;48tjrB!xDtW9N#YV;jl}}xyRtlKf zV1igI;qOvUCBQPKbvcqmfC}W7l^yPqpEck5*hyUtVG*H!VIu8bgMk*)YG~YI+LJ=; z-Ey@{a=@*?30hAHC@g_39qDj?a?(njviEsfd-j4ok7E}z^`#lIMdA-YK6d(u>_z>fv-nh`CR|o z)Na_DP~7C(l))zj$OkSod;yxwbaxDvjXI3O6a+jf$M~G(y1Q_#QMuB2yv7904wS*wCS(6YJgcLZ@ zFEYyaefn9^9`%>z``U@l-m#vRjt@)XcXE8GVdgov+a)Td)-+?>8qV-do6wJtz+Z4w zoP))4?Ihh6u0C&V6v8GzaA7MMlU?Z-K@5$6+#%Z_rWyH>72v2k51v5WaC>6G9dyBq zDmJE@4;9ma2&T!e3eX(AFCQ91SGQLnL&m~joy&wDOwBl#^d*r)ZPlC zevdIrrwGO)I5#XzrSrvMTn&#G)DIMQ^rZ+L z|BgxNn*~HYxfSe@WY4bB!+m%ZuhKK?8KCVk&Y@1z&KayF>NjBQTt$BQ;gnH#y?-!x zMpSKtz3y9y#7Ecx_-P-KA+()WT0F$-gO{ue|9Lj(9%h)R*i#q(e`^%E}-lY$NhMKIX)T30H&m|s*HEm%G$761% z_}WbkExPI)a^Y2i?dL@vG1@x5K9d1j1tnepA7ec|?SK@t)ZRmUtyV4=Bc3^8p4qur z77_G(pDm1n&+@-Gd&d~tx^->0YL;!=wr$(CZQHhO+qP}bs#&%<%U`|k-s{U*=lnZK zPe#)ENJi4qp3xuN{kmIgyw2@{ews$d7#^6FF=RZydK%sG?W}VNwlwuU-IB5ps7nqT zNpBXg{^k)VGe}9m;Fn{Nv`FLsR3_MfKb497F!35Bw=qbTNxG(bgVIJR>a~+4F`q}G z8rPucZICpaYssdDw-1+zT}HUlv8-bNypTsr?F9iUu9uqRk4iRU zlzQwx1pwt@k$7l~aKfb)Z3Pk{;>5%t;lQAxZ3noaVAx&A4{+kN& zi!tToC! z(`jhH8sG|aDRj!Okwvv4&o{9(=(O9V>)Xz?2MQ-wBMZ$CDKSNEwRWfHu^8Dnx*Rp_Kw9W=juya-<>7UZV zmLToDC=wUWknL=1%BNiw$N$=lA{mm1T#-@}!DUL#i{88-4Fd?wwjp~NY<)Wu4*l2& zYi5-L2OT=Nd_)+l5Ql!HRAScD8vG*kV#VjT)m|^6$WLi5FFa!npYYiC{a zk_1v>^>JeB_$UBs3JPd+p4jLd>XVc{D&FT3oGHjT`l$MuH}gqd5T-}yc@+Vs12j@bo~=z zNQp`4O&Fb#w)>l>=TJBK@wLaPMP6C!R8FDPp5c_h%6Jgd_rbh^ImH8I-__ z3}1xfLgH8D?|ASUNnrcj!9jPrMh$qFprn;wfY1AZP%r+_!9oo^?3iLTs0Wyi@T^H8 z_3j@bm4@+Dy#jMV)d19t%C^dq1;erc|B#Qz999X#sC)p+k;Nh;+)`nh%|KCQXN^ zyVM2FMyax^arou&ljL*c?g4l%iw#!gLqm(o$(?5!QnO^~&%4zO+UE*|9m2>p(uz#e zgpqwl1VLG1$8PK$r0|2t#FAW9pS7d;U$iq-BgPzjpBnRRw($fHPK_ ztZQu7#}1gjjB6xf*r7MbS1i7Ms@VPI7%)i)sp_o(#?fpO^GQvkMNta_+x6VNZlc;C z1Gz@8ck!v)eEfX#bu39ooakPlH39FuWIp(zSPdUAuw7-yZU}k|j?sin^HQ28w!PW2 z_nv?LE)^N!fio3A9KL}FmA3igxx!5c{(Sq3YpDe{{5~fKsn}=TPQG`QPyJS)9hb*8 zW6QQZTi^d8A^VFrp;{{jQ@#pPMeIVF@Wdl=sYjaScWrA$As9vcu%rD_QSV}}T#_nh zwQs#!*(qZK1|!(WV@Aw}_qRO3dw1l2gG-tNQJN#H<{FUMyYWDLXGX}a6oF`#w|j?{ zK5qX>m3>}@XC8`C10m)f*OJAIT1EN2)FI_zMpoT4@q){0l0eh@G=06x?I9Yp+ZasP z+jx+-$C5Q`!7Y!}d%1;quQD+T3|m4PiPsll=OR3Txa^Mn@=rOH$6(WNJQf^cj0)-ll?9?<;R{PiRVDEf&3l|9f6K7; zgX2$&&AiuC95lE@yuK>$+nq?DY zk{$^ZA1%CeM$jU*829XX|Das#a8Ysi)QJSmhc{8ZqXP9a=i|w|qu@J5s|R!b&@aR1 zE&TWEO*~L;NqYv62SYz3zV%`OLIdD+3Z8p`07qH`8Z*9IZ^2*eNc&2}VU}~<3NlGi zLdhwS#yH|s&&rTRa?MGIP62cL$dd#OlwarR!nCrvMb`?qhs1LgVJZv*M^=zxz)z(@ zeSnH@jl;p#-Rka>m>&Zi@%?}#>qK1mWo8tm<6JUhlvB7IHlvZsOtILEQragF2LnGHt=wPXNkOxLqxz zGvFK08_SswrdgK#lEq+vx-|hu0PfwA@n)6BS&(;~3 zsIlFbg>)=FFmtPn;@tqPY#C-ezGBb`RWZaE6M>NgYK_p`6~v7aG1NH1Jqjv3B*y&y zP3W5_)_21irF1bk%w}j`_s#TSzm`U4>t5)%44p3YfVKV6#@eAu_0_^8p`!d_xq)7a<@ zTNQdcWUh}D#5fU#4d|S9P!%p`m}Egj+@y{n_brrsug=N0I4qE5&7ZT~rmaZUTvn9iNF~t0M zf0z_Y<-rH{Cks<$dmiFbK8*Q~H8}OlOLnh5BLbyrs1j$55OI}QVXi+Qdq2#UaQ-XC-rrw|v;; zH2Xwp#m9ykCxHk18#eH47oFT!j?&PGLhH~k7VVVM&^18<1SMO4PE&;MvKEB6STE(S zf*`XEVS#cMtg7Pnv4TZ$WWc5sM0OEBBVJK1fWMVT$<(Aua+e)(8W2K!jBAbKYT?&$OG8htRejh-96p6 z2#Wx{sxSKc)iqk_C#b~J@s~Lsg^VCv829j)qd4CoB$X0bc~1eK%@=~yn(}yk+otOm#g4m&4^=uzd37)3+YmBp5gLv4jXB2S-6J{D zNPQu-(H!NL2FR?cu>hmljLh4x!K;X1%B1*iF%x^CENWEN4`b*|kS*eX zf@gAt3CyRMNI8d&v!CgYKa9`w*df`V9U==_Sd!tO*MccEORafhx19h^9(f;dXFCh# zgN;4LJ#gFrvZRiN*q?n4#b27@PSrIs+qO2ZoXQPwhCgitmal{H8?bArFRVi&hm;CcoP*cPwYb36vDG<}f2EKBh&Z!WA0YG9Awvq~ zbpSZZKT|iCKr9Etox+r_9)4-KQJZaK{<@Chh~ZM3wn(-D$C#ozW{yr_tDx|tcwM>B z`SSj}>D%${^_^M<5Gy-VZju;{eISnI(pdQUHa=dSRLv>#GHhX_5gq2NofQ#6`B2i- z>H-yg^}V~wJODuqlL{DxDn%#K3Dx_+maAP$Sq3*YZNVQam z-_~9tUMs1&x{T`_RW7^-PUPT|s*vC!in&{fnnAI#P*-5KBB~W}bBbsU9;{OE(+NU> zQavJ@S}=qenlJFBR^Sb{kC9qyz;de>9VK5&N+v1&9iG_Gjfv5Mgfum?3eH1A1E#E& z)JSV9?~9*T5ynVZB<#T>L_twa)C%{LDjO9W*Q8vy7{^ka6%U73V!y=d&>H?ZB}bd( zNmW}Y&OLx-89?hq@Mfv;YHW$Yc3oX*bq_2o$X9E?i$xU#V@n^CMChGuxxE|YTqk=| zPkze8=wjTVOKUz(xarpg>KuH?bDg3g8;kuN%dg*5pGp${p)SH)G9kEP=r)DMzhW z3pO{0Obhm;OjX;9+MG+08#e4Iy#9p33>fCAh6v+{GHQej^*eksKOCF4$2j0(^s znX>?T|56&K#eX4i&7T(7B#WOzRstw`l(nsNr2IeB?e?w$2!<$(;o# zp7dque6n)HsU6YJdk`l^VTtqM-vh>pAQ&1c1h4<~C#RqxQ^iMuUo;A!0K1r2`V}98 zp39^XSqSP1rfjwB|EPU&VCqzJLY=k@fg?;lwv{A%2ZVN{_6BgyD}pG#vq9OV>{$&q zf_$0~l1p@vls|Yy&v!0KTvH8UBCqU2nx*qWDunC=#cFfkCe5_=XSLM|WI^o1ZRfk{ zPwn^DKW$07laP3pyKi>?%L)9$L{5u(M!fGi#3Zf*bCRWdKtn{$uf)s2CB!B7QEN=! zZE!)%B8;KT@ZTXgIRBE_qUry8c00$ibL}`IGD};^@8`A2aK4-do71FtGpgY20m0bCT}}T zZ*g2{3x3-EYzb)#e6-FqOB=_j@^Nxj5w)N;eslxGmWa5$eHDGKvQ%uSLp<@qX{5%yIGODmk?#oXzBzn90nL7MJZ;WpWl}Dc%H+K96cR z><661cTBW>I9jX}UZ#Qm6wW>{RRpm7=Z8Yfn1qF!qZsrEd9Ukp@L;X&R@_b# z)i_`N1W?5>z=*f?452*JL0F zFOkjo&6?sBLIUQBL$k@VAvrR`0nbT+{9YoO>l!r7%Z}?9ZN_30*Oc&*ZH2R>2Zc4) z&dVA1zl&x`k$wiqhEwFRoLSPa(VSVZjS6OCd*^RmcV-wl_sD*#?N=e!kxCyKxc{%%Yn^AmQZXnr&3ygQVW#Y}6qzk6Ro2>biU6E>iIxoq+jD(Icl`vXxe+E4^?zglGf+Ez?-ItZ{$Tu>CYwm>~Duh`CP$zA9LWHjWL$s(Qs2P@`xdh4)4_ct6iDg}OzrmC} zG_A{REyv++Mm&`4X}T;LS%X5Cv^+7bE_O*V%(##uL_CHyx5`$p-osVj?AP(i-x^rhL!po2 z7lh{1cxwFV_vw9LXE2nJxEhmFV05$HozlgkP&IQo1Gp5eq1!e&Yw?-vl^p)bBZ@hA zQIvO(uQtMR+}zvha&`DZ(NbOJ{1~(;&e5?vDUQRV54v-8ylwk@eJYD??;{U0YeJJ} zhSWN4v3~eF5rM0;&C9VYwX$_6!Ps&CcN5J_3H z{wiO}W=f-@rIv1%YJ&!Epy?U*a2+_VyF~=7?g{;=d8CBi_|Clc3AN59&6bY5t-r&x zjqPTqM5y&55}fz2*CZ&x+9BVD)p0F#GG#DX1C-)m5NRtRpGmN|uN5__b5bIZT5x-{ zT^gA&Tjh$FAGub>D!<(ukZ>*>s-jiy*RT@`KDyj^3O+U-V^Jo-_6d~UH!n$q!WJ1l zjRdl2#TveZcPDWqk>c$8>0~RvMYl&3?=C;v6Tg_92TdbuNmNx9Tq28yd4p3TNHV*e z6qE7GtoGQ6 z+G2^r}S+$$FHa! zZH@w{O7^tI)jzS$2v4*da-=!leA#*o#U5IzHu2DAnA;ewVnV@8yAgm2y4|R|37~zOT-ae@f z)+30dND@u9W&LB%fl?)hLbYPINoLzgW^%Ct7L+0!4BsFm=c%;EZRrPW-@P*t7pfMx zJ4xx^(jy;&ZQC#S({A`d&YFv;{IwPBUEhERho1NVbyh%t?mAfD{TIlMH1Jz1)L0OJ zh>J|xV{L>T{L%ZWPK(Ll4~ORG_E;k{*SeH}T8&{6R=);x>V*}_7!Pvtf8b(b+p0mx z5%CRl>E+-NORR<|tYCE&IR0zc)(0#v&eSRxDY<6iR=~|2J=}_A_9-^qA}Gu-pWpVc zap06;-qPhcrgu%)q_q5@T0YmI0+cqzO}EZ@+Vi3S1iArTt~M{ePNC3n4;v*4sMVq( z&Xx7{x2I1n@tl&h7AIfX(1|0pCTAz1^ z?{?wnKj>0-_V`QfgBaFAyA%z0%>v?za6`iFTW$N3;-_PdWU2*=WlIPb5i6vC46^WW z={%r>GbelhGbWRcAF=T&8;@hNCluokJM9ywaKSM$)Eq3G7wn)WN_4sFa7(n&u#&~_ zZCZz@<0SW)f8(O7JPh?FhXz#+vq@Tf_zwzCJO z%|$`I*2GJoaS-I;e$BV;IBo1Qgm!6`?Hy@5Gc@FugA##KI5~>C-rbY|F4*ZuzzmH` zz&7rB6Kc1#?jS`#66sBYC*5OP_#aUaWOsA8*gZksVucy-TnT^plRiAY?U6-GL}KHl z)T{KIF6IdiCxCKc|R2ocX)q*FzSos|IdW#khD;Z<%C;~Ayl zz*0tOEd^DpIURvq4#prB4OMDiKC+x|RmJmn}2ZpoIPEu(X4=Lh}LPQsS zc7Tg~k=$o041g0>=F@s2M|Hzg2^;Z<2A2^txfy^SuF9BK7Hew!cHH~9+V7gF%=8U8JrYG$-g;% zq2OJ&1~eTXEx&>o(8~j4%T=`6@>iMWqU|*2>0dM60NX#ivc*eXq==CK8Br2c6cJL* z=a-We|GHIMQs%;fIT_WSRu;~lMD<3T7@@?Cex3rtEQF9=CX7h^49oJCEa5pu)gn&FS(OUm;^8V}tV~$%!HAH4 z4RXsXtD)C2OzA23%(e340OJPt)#%`58_J~`b;{}IEGb0V{32pxczrZ~HGVsc3hzh- ztUxd{&zmrY)4_cUh;Fo2*etxqJTOOnJz{|*bvbw^c=p`wi;L9wyUJs5W32fSPYdkj zj#iQ}0oe$NGllOKD#x0kO@|d!O`oLi?fOYm2d>UN5#xL&pVpSpu$|ON>&?S^4}1HP*jK7+E(0Y>^~&Hryhnf+x)dze#&VhP zJ~DvFjI)4x8y4epn&A~9bfpRW73r; zx;fn5*|-aITh$E~?%}Qf!{IS<{P-A&O2-CC2b6WQHG1afJ(ylokb&9xOzi^yg?wj6 zIgHgvZYr&}xee513{V2}4l7tgPO%&3DbUJ2mh&XviFu+tWKq~JRD4bhGW}u^ zTDrkmX+Ma?cD!8|YLTX2#I6LKWdUJ^R?0VMOc^^hb_!{aNcQlmU3xm1!d!XW0!<* zH1;};HZ5th^tdla>tAN;IpXeOFLdp|QE!o6t`e+y_@fFB9#9Q|#Hugmcbdfh1=s-` zJIX>*0;stk`<-b5CzsYg6bb%T6`2ik4#;V^nTjWfj*^~+A018m1z5hF&AwNYX#aXc zvDL04aFf^~HE~K`zO35kn$abyc*0P`!>{N9{%FM0T+VmDHxDt^4PpCTK3Mj{ialmr zHp*K27mK(dcAbReG_WJ-hfnKhAkZvAu3rHm6hwJWGm5ZDMlP=nQ>6 zcB7hyBebLl3WuO{ARq4e_A3kB}Vm6sb$&{ z6zTJv`9?qIql>!N$gH>NGOh*kpniL)0_Jk%6zEw_=PT_4dyM)4WYhc|$(Wtq?W(?q z0D2IeI??zNst&Rr0SaF&z6Tj$!RY>V7T67b)wP@|CEh_qtW`$^0Ze=8k2qTA)A({r z@T)gN{>SqG6_gU*n0ljPjbc9_5m5yapcTG$YO_@ADl29Yt()9g3gDxix?iXIl091N+YgQf!C9qY_A{C_2tSLXn&^!6i%Ymfz4o#R-K^Yq20ts85*aO zV-v`cG$0j@0h5aWS6>2P#ExqC09skBmRo?(*gaf3gSP`PU}5gxcCsDSJdxt#2hF7_ zun7s|`s7;>Mfq7ldaB)e?cB8XBVs_l3A7r);h)%Dtvi;fI%M%8{$wV)BYf&1Y^~;U zDVX=!(C+>af#(6(2ti5Cmkt_+$k_tZvgOSiDf9H(vMwJC%g}s)#9Q3yPLyLMn}C&IQLtg~$|5o37&c ze5(q#2;-Pm2p?8Ek7C*VH`|0R9X*r>V*yEs!TdaUoVu`^4xBjXw6NU*E=Fn9 z@lcGGJ%mDUc#KsBhJ%y5)%6aKsGS9Mx=l`MMjR0g+XWf~H6%b?mIUbPh=!*FYQ@5_ zAL{<)2xe}&QM4nle8VBvCMy4fSMnq|F_{52+pnr{HIegmzOk!Rl7(qn*rwSgVh(AH zUzo@4_G4hc<#1wJ#Kh-1l_W0ITN})_#F9M!=A=f;K$LREBV3QD*HGsQ9YZ^n!`lyd zKNum3pn*rewlVqIHAJ4T!?V($2wA4BUZ3Y47v}xeU5(U_V>@>s!sZD>^?p=yj__*e z7W_ZS8+j{YF zx8Gb=Dxq6nXT8fA>joDsOx+L#5y$8|Ue+^DOpi)#>)Rvbow{;TJQaS! zE-o>TUHLlT+`jpe4_!^dCtNQdDSjMbe_C&l=6W5ym8Yqpkt&`;(}AM4C;h6xqOQNJ zCq!kp&H|BS-Hg=ORp6-Rocl$#ss9@r>VqR#zH94&$=SwL;IwKm(Tb~J-GSQQ%8!Bt zQyFjT+dh^SM~_bBvRyY7uWbB~)b|AtDVMLS_X2e;OlT#b;4-|2BrL=i!e;W3%!bKl z0`xD?;m%cwr-HO!rOXQGOlId@{bCN2^9DvQACWb2e=kDn(I<=J)|S&_ly2p<;7oU_ zT3WkA0b@UC_E=Dt(HFoo)ZunOfpycL#vwtwh5$9EO9a&Fa+@aoiILS|YIm~^U0A5x znH`of-y6X#Jx!<2FNrn=`aM|e7%HEhQ2r7o=e3YMbR~O_P4Xv6+q=-VmtY6xxIt_uR=}G*5>v*bbexh2P>PV-HBFLBGGFkQ)d4%+yL~C z9_T!Ib>wgu|wB>fyk6-g>`O;thK>DF^>bx+(kEP5&^6X62W*P#~2)&k>GspFR2Nc-9 zoK81{X&A3JXquvQ681sUoPBhBWN_oCWFZ=@l zF2GSYZ@mNR7F?VCM~VnC-di~QgsI~>x)_*ERS;Hnm#47xA?BE@y-9Aqr!O!Q0Kn3M zdlzD&o1WVX?s+Q}w|aRwVAu2Y_sFR*t8M14ppvW)Yx9imB%EonmJ!^(gnQ|MmSaoF zdFMxq0Tf4$yDl}`bB5Uk#tVVa>%MUEdH&!MMD``AS97x7%JpmHIu)OpDOGOW1K&{$ z9IzNiA=*p|IwF9JIQ#PedxT943^lw-H}jI&v|nQO1QPc`)_ym0UkCQ2U&7Sa9;sWM z*4t~%<9Q3l<05ffO9OUeWytTM<2rCpCHHKvj^d+ecux;Zhy9L&11hwzSW`$LVaUKX zHO2Zmz`EaqPF6yR*48IEsl(Tszh`T~o=YRL-ftq|BJt_dfe6J8O7&-k`a?nPMC#$i zWyR>(A))pW(UXZ;yc46B;#RMkr%GaPDFC31E&4u^8nb`o@5e!xl)Y5muz!^umW8nj zM7)a0@f;YqH+F>?m34{ev%P~04Oy{^$Lw@kxwP+9_Z*Cs71 zFPpd@l|vZq>9~vh)sbEu-_8@QUyl_$${pMGOM?u8MUH>KXSJ89edvy>NW*FU=hZ!^ z&JNK29wT&WzZv@uq#~W9Gi?DYff^}T;J96{|pDM9tEl1H4S=6oGT?Rg3B zbJ+zr{A(dv_(n;TKxIzs2ofU<@gi0j{BGnh_~}5o*K5noew`FE@=pla_Exn^LQBA8ex4Apn4zpOAn5D z?;~>b;ave`dHdr*YoU6#E7Xz9@9DR_%nvx>>iF#%M>2bB0;pRy;z$5vqQB|b03NOR z_e8Ouc<6g@D`(2SFSVotA8JWE9$x%DZ%QsND$F<~Xl)xpANK@DK3{|$mL1N#56%=< z0auUs_PMya$PYGKi@T`jD<690dzp8|Y(i+Nh|&V(hHQaYQYE{Wxd76>6q=L@T-mmy zOI5(P8pm}tHh;vo1I4mu*)|n5tfRSHqHx55M6(+Z1Y}Y+XjBa?wf1q;LWju4A*1iE zT;DCF_PW*{F4^`fKwJVNDml5~=i`KuBEu%P7>*%H$E!Q>6_CAEV#mdq#8+l}Rq*+V zS^;k3OthACFtg0XdBJ2^ENXC;&b@*EW_v~ZMcT~^nmSz`^9bCgIyM1Y*`$n)st$U7!%mRyVoUiGmjmF z+ihmypr^UO{gc7@%eU#G3df5@d_AzPf&}A(>twu`B z(VR0;kd~UuC8)VY*?1^v#e0821vEg+E}b6D#c3aps>@T?(v{fZwT|4__RAuVwNxR${^&``dC~0@^>l#cv@*0a3t>mgBkDLq2armA!l6tBjpLLmp98IEyg1oa} zqA;#=Z_oZ9wBP&L>tur9`_hXd>dO-Y}MWPaA z_DpavfyjbAcA%DG{!-2&V-z=!?%OTkFvjjGlGuAwW-KLX4m7U|CC@xWdOj-CP)&{95EbR+HsMidJL` z$bxwnhxKs^|B)f;4XxjBALR)OQV*JSYXnHCp&7ayAXQXD{fNt&o2J+(f)Rz3;Q@Uq z^z~fQVT%8~u+)*OBdNG=|z^HX2y81AhuoDq$xy0fl%2(cJVq7v` z{kXb8S#F6$V@H^0=8T;m+W?LZF%)I-<+g0oxNDv`ES$|65%Oxh;!mbUzWCC(Cyyd$ z4W6*9t0uhSASOj9<&ap3NwL;O4*3X=ac74BHqWQH!%x2dj)}kO^;qUVF_8-o0D$w~ zF=1+F=WJ`|Y~u8f1KfXt!Y=#YpxC#C#(JijB;{yMaXc-NoJ+BaGwA%vZ{3Ldc*~U8 zB-U)4q*Oct3S+o^^Dvon-#s@iQ)vY}S;$n;MKQ?@*i+57PyMZg}BQD7G^` zJm!9VG(V=09=`m>|Gf-w5X0FRJpwBV&sgHAh={ zyCGEA-XoTU1oe9WMEeo=6)shO#s$bY00Ra(gIuA*tQ1wInCs0>^ykV}s39&l#MSH( zy>fw{oeyuhBXY(`F)T>_jOr>saKc=^YOK2uX8jmp1oc#>p-Je|={_oC7C=5L)*rL_ zoDdT>`he=3lt;U$9OXNLxTWxG}^E;rOnEIAd_$sV;lN$Ul*7aS7sC9W7u>4zbZgZrMj>MeF^ zOAS2Oom554aiyNF2*XBOD|u0lgN~CG#<*w;a2@e?GfUE{qE!p+*xTtNQR;IdZ-qqb zStHt{B1iNYV-3_h(RPOi7uip&A3W8dMjmPzbG{Y#h$SVXj^5UA<*RMjJiuq4mPi?G zs~6VQIV#OM2E~2`!A?jf&3-1y?xd6J2+6O#5sW*1j5Nc-8K-&}W}aysnZik51B*W3~MDZ+)5v{~C>S_kP<_)dG6Ms=6v$`qNsE zweUxMlP}?`^)m?JGX`h)?#ym02Yvp}dX6{erwtYX(HoXlLDAx$&OiIty|EXDJbhqC4RIkzt^b0c;>=m4+o3k|Nq`+dh2WPnr#tYkjkm zzIjX@a~aI+O2Zihv)B$l1yL9~9K0Ex1MaWcL!H6QY=l8@L39CdB5(s>g6M9kb*=Y` zrlGkIWy;J+pUQaAmcC(w@wS8WwuAMygSWPW;kJYB+rb#lNTYUG$MikokwpJq zMdFeFp9`S`+yI#%nlP9lm_8JK6n+q05M2n|2;2agAe!KR7ZC>81<}R855Ntu38IOD z9fIj&;Ya^jOy>tj0yp?YAdMdk5lkNdPYOQ>{O=+SxR&19cM8}0|0|1H=q{1QgaiP% zvj6~q`%gGJIeS?D&x7JhN6T%i9MzYvZ*b}c=Z{H8)fx3zg<6v=*+j+mGsXn_sxT@i zILXY%8=y`?H1#}*$|fruj5YtCop+-qfwb=ThxdhR9>GhE@s88DFZ5@xd4`2q$7{Mb zz19mh&+oaHo7^4G!;MhgxK`Khw!ejb_`^P2=<$(4kGJSl{`&6-IR zb6NO4xixiJihCCdyZE;4-yongrWOfv6B%`K8hy~#*93&FCyPf6dLwbeN$Zn!l~+xA z(8@gS!rV696X0_gRnJD|!feg0QT!n8I=u$x=x$OA~Ye1bsno z5A!t?0>d`A^lyK~Px#^+#@4Zehso)3ckGaA_SzY|5q=A-7NWaM&|Ugb+iR7fC);qq zeSlm0uK?}}?t18kt1~PDIbp@mTA-tVVW?&^1)O;S;{XXB`qa19i(Mmfjc1act{%Lh zV3N0ZZVne5IXP1F zli{srnG@^2wP6r3SU`uU9~OO3s<(p%_JvsCSJ7$$WmMb49F86^lu_+UPf0C4*`*#~ z)nYTU*Nss#TSUm>Th`clVAUXS8IDWdCAFi_my3%F(7u3v{Rv+*{a1Yw;cu%x@PFY#QQ?|5yA43fNu@dAV8n%8)OxxL(c*3>Wad)0^h zcV}Lnc#H=j4|D_cmS8|m-VvNIV@~B}pFVs6T;o*pp}?FN`1HMd1;9xc8vzM&4qvM(P@$vm43er2oXeNoJZ2tiD)SyEa+G zhCNS?RnZ4=bjcFal9Q&5r>Hjum6H2!){wDCGq^xyc8tg$0|f$Mp{yC zvMT<+5sZ6eHb}nrS+^3k1(JVRpXXgBwtn++$n8`xdX(8DxxFnVx@8j7=}vA>NI9)d zrmE^bOxN}=WH5@E**G~rXB9a#{-r#y0ztK$q+Z@MEqGpPq!$|e&^<~HZn_4OY%zL- z{K%$yaN1$zJL!AH2t?pzy;~G$bOAk|gkIh<&HrLzy5&AOu45wAJ%b<`b9z<^OMo&F zrQI|=++Q;(-dQ16k8(1zMK+O}C&3f=i;j26_6jZN=_QcqUUzy|WQ!M{hGeWAfq#Gs z&RC0;;p?!<>^7-An<+uEDy^wMa|qT@iX;ZX@k7%jlG#X76akgi((ivvVa&$@%RS1? zRk?qx29cZ7ttjg{kg7?fYeDs{=uy;j-F>Y2J@X)Go7=W~{7U8GB!*p~=2*NFNc5z3 zJ`S4=ozmr@FfkK_`n%h`#MXC%s8$AeCc)p!+INUfAP#hyJBSx903fW-1u*M(p%I-_fb=t?fTnd zWYrSwf^MXrh-Pm(3FpjEVB7tOfGT6MSk4mLkk>0ZjSpxYxEB=k*C!kzatL}+YDhK2 zVcAmI^$d{VItJnVz02+<{Oz@u{ra=BopQ;FwoJHguZa5@H&;Llyj?k>zODhxFc0@W2ofim5W z9$=bTr_LQT<=VJiU5&K-AL(#P?~UV)(d!H0!SNI6P={R84`M5au)bKY4td`qh;=(J z$1l-B@!q6>)UCT?TNy;BSI`>35GTbsf-9v$5xIPJd&D^J*n!&^h^_-+LJj3Ni{<&w zE@)=76WiB?3pJ8^%=e z*^EuLx;>t8VaNs{EwWF}*`q{Rh_U6pP@W&XVROe!R>DsGtVHFuP?mYqQ{g2p=2##1 zg5)pU`v!@D%hOp7yp>-Hbny#SKkXaGDMeQWh~epoN4{s7NjqfK--uT)0zu<56{2L2 zB?^1pg5M!?mxNl6_J#0di04H9F+%I2>XA6;InZ-qds%-Qq%isYK)}}*aS8u+OC$J! z{tX<&WrfAg)C-^q&JjQN&xHkSaU05~qe#X=I2NAg7`MU#Bn-?3=LE|ju>)ooT<)%h zwb#L8owIP2Avi7X%`G`uUWEbLX`gTQ*9qn#yT+uA&K2hbVH#HVtZJT(ZjHY$O};?$~MoGBv?fJ4LIL0nsu6{2aJQ zb@6Y@O}Ys4zDbL}m5~o@mhKEd>v~3)Jzy(d%z(-U(v#4Q41`%5f$S2emf8 zHrio-e1Ri z>98IiHNn%_L8CTZ#LODZ-h|O47zQ|}58H<9y3Ej@OxVD!uMw+13OYljy@_qW9e&GlzCZnW5s{`xnt4-yB~62i^piOefW993X^ zANPEt{dZN@4S-~U3J3ro^;6mX->UAvS`Imh1GYi*&_7k(k*ttgIw|m@;uA4D}1zE3+z0FECsF!ur*L1t8l~#=&LgF+#mSt5Y=4rR13sWx*h`i?LV4 zI#P0FXmZ7k))sP88Fmovkgk~wYf28b@eZ}G_TMhWT4~;1MnYBdY7i`X|GkTNwm?W5 zKS{X5PYVa(Kgqa}osEr&t@FQqoBvbSSwKbAc5RqW2axWN?hb(wBt*JX>FzEGr9ry8 z1*D}Bq)Td~q*FQu7*HDg$M^O7&{^LU2l7+aZpyZ z(U;XHfl1OCXKH8Yjo8%vd=mZfBzWhLnF*bpeEJPKp3~Pt>yR5%Q~nnwVeJIh`m`+j z01wcLp7ZT(X-D6so5B$Fn;-Gzi$}UeS`WBU=;<@N0=Fno_FXGw5GYQQ9e8Nm1IBc= zM!J|fGPbCnif|I5OmoeigJv-^cJBfMd-JL531~$2(zds{kU2;jO&(PfmZ4apkzDI+ z1Kx+#lGAg)mK)(pX|H$GnmsQ{4mRM`l@V^!b#$@_ic@zk*!E(!<1*;DJ7Ib&mvaaI z_c#Eg0!$a6W6+NL?>Ip9Too5bCs$5WM;G&75$?fc7Z*F0^8)%{6?IlnicNnuGjRIFfm20xtBqoMI z*{0u4ywZvc)82i#9Ys&eH9zFWOoJUsELoOyo~x0yFkqjz0P%; zHY69;MEdTQXB@nP>9nx{Y@x)##_2)hRyp4_IJ*HnC5l&ox(5#K4d%~wFm*nVPh)U@ zQPuAxO%J?|r7AY$Ak;~DT0r~iVL%F*?)8G&EdE5`*eA$gK&JxBUJfe`Wy4%@2D%P9 zMm#*-2-&(=it@6J5X3wSYRBb`~ zW+S=!Pk|&?byy#Dn|Ev61X&u3iXTtvoXBfO&69`M*2%KqHX*H6aVK?D*;ED^OO>d9 zWm>VjDUU)-;*s=UeMjY6i1--$qcjyEQ2dUhCQQUMI z{H#Oc@X6Q=nFz&sLtQ9cxEuM;DrACn?C3EF;!*9~}mSG{!bQ--911E$SNkMf9&7G-p(jWDxvt@*;Qefm&*GsMuR_!;1 z=N2Jxg)$5gm|;2q^cgK&F;OtQH3-?fp_p+nNrt;$UP>8ci$1DMak2Np{jNGWy0|dg zXE}FtOnYl(bNh`vX9mKj8EefMW+mfKqb$U0R)}?Utsxg!>t1-;tq1iHp>D|qQ(rm!fo_2AvjfYJ>OXW2ty;col;4AVJQg zGgGk$32gj=Y2E-#0SG=uM2YUh4wKn~MnnYycH4Cf! z4V@UX;B8t8lMz??HOkF#@!fUrgbEWZ!f_QO!SVQ^A1cN+Npx;$*QHW*hlyb_pYwhu z(~ot#MpmgzhuA3Ps#jqH%Yf)M5_n|~q|0J6-bZ15x+1S6Wv&ax%`&Zv_UF_#q_b?E zo{pHWX`{)IZEF-yXj_G66kTnOelsVTA^-}SGuhRTtrglTC88AC7w;zS%8>^II(EJ= zdb;nxkMdsLrG5OEO>Wks(k}T-e54AAEQ@Z?W!3zG;x;DO*RLA`rSE}@^OQg1S*Z+J zZTmP;u9N2fvYg6JDP6wSc62Id;(SGSNzj{U#j; z<7XrXW>;G+K@Z?iCs+klZ@Zs@R9+Ok`tJQ|dY+n!80&5<5)hPYx#jRgkzvMJh-=Rq zF^^)okoY>ti-{{B8 zvKW;UE>P*HmrIVzA7Y=b&6aMy=bw%P@_j1(WK^BGLos#omfPSarU_skXwW)u&j>cA z>_<@}Sq|zykU6)MRAJp#{~*d7Tatadh`bJ|_B_S>``UsxQ+j3w&EzTQ^#%QP=01~+ zot%E9akkp9QV$o-r*qbV#Rz%tG8cUsoNsVwrOa9EK8ZR)jpk%XufI4TAR-NoS05Sw(IknA1fVWIffh3ASFA9y>`?DOitFC9*@K5O=aE3 zhBauwan`;E=KTVVBZASYPU~M^U~|;<`TB!aX@e&7V!N$$uwsVKZw%GJ1WTzo`(NJp zn`q(R^vPuRZlYUCO3xN2KIF5JrnN@^wZj)2sZdlpSMRnYRw4TlUn`DXv^mH1LIUgZ zA04m+Z_~)rl|6ovrTC%kfZtvc>}VF+6PmlaJV;8>u~W33sP#5ZJUP#bW{NfvCR1@7-%t*K-sJ_j;thU^&%$?X=zO{lW&Y{2@%U| zlqKVH2&1%4ZzNVP5TB5ZF6bP~@qjj|WF9&JOCH3b1Udl(tp@{0RyFQoCQ0NX1#FWJ z!u9tCWoWjO50lf`V`H(zEOc&d()l7;q82p6hB?se3T0tm1@Q2ZxR& zHb0|dLbV^EMJPcDH+ue&T)=)f!B|%S+~+uiiOYbb&X@i;wmK(L8g81#Qk1-=9AW#l&XTNFSU{HdA8Zpn8sRH_ISeBQ2%8{{lh>U*eSH zM?3WzqnUodnts@h(8?Qvv%xG~9#dc(;{-AEzLGq1GTbQibfU(7RhF#Zl4LU8hMFfE;n5=?tVY9QMKkUY818~0 zxGL2tUQO`eIcY6sNVVpM(U9ooYI7WjPa-%F1m|3Zykf2{U9_N5Y}aN9j{^!6(akxOJ+npMo7r5Ny>{keIBvmPuvc+k5!K^n0Z(o<-veeaz2i z@7ae?E`E*|G_KJt%G8n@y1gf&*pm)xk*3(2uW%brh2GZnY9g}zd)=Y@S4uYzLy?Y1 zU~3LwdI^NZO@nG8H^!m8pv!?bpT}zX<(cI=`pUO&LMNLYZ+ZG&R!GGVE1azjz#{+6LNy8J#xXZ7&LsVg zGJpReqet4n@us*h+-zR}#Cnc)#j?`}}UuhOHcI<})* zU#nR>>7kA4aBv^uW&P|%oj68)cA?-kifDaZU~9^#raZXZd(m)mCY@SP&5`;3YHuQj z^9AE=3pk=WgTV%WayApHB08A+()aO~DD_tuJ3#1Ygi?OwZG5&DCH@*s6Hp624}5+& zu)c>i$W%d=V>EX$QrSwTxt!b}_*5n;QeflmK~}}koAqJ|Y7{gqv$7X1?Hd$+pdPPTUH)`mYnOZQ{J4ZQ4o5uB0kTO%LaIrR9tE)mdTjHaJ0H$V%DhnTZ ziJ3e3u$>^7(XxrF8=K9NL4^nMmzkyclwM~27DUeZGG%a@|O_4VD0y{^}6BYxnCj=yKpCohfk=b&pFeDuH69|t!L zV-vf78g_8futOmie(1S3#_%{NF|i^s3*vwxmJ$iplvN<2ZyhQ7 zzI1*v^2QVG4_xRRm6e1~;dBS-LRj^=H$O>`$yWOCXNnUcf0+#eH6}2VNd><|4Mn%n zw`TH2Zq~278?k8+@HThrhkIGAMn0XG#QKSpW=bG@FQj1Nhu;fbz%s-@IvIsf*hfY> zP*&;?ji$zj@`xCyld<||!*#6)B@F9ih%No;{>6+_PNUpx`Z^|O5MpK%7tnbS?$(6=s*+yQ zuk(?MV!zq9JjF#XQJgf0c__S(ofoip*U;!(DILV%Y1z3&g(!~-fBI1Zo1Eq8`OniI z5377wW~yYrC(hT#YT=bhHfO{EirlT6pHBg_58$3bWG}JwUfBxqj`|-2@wOwaM-QbRBZAe=o0*%YODivMK@P;s9-_uKvI^L27B{-;-BJ8T%-CQ|o*IsbQ*)3l zY~`o1JWIW=5PsC`jMZf8`EXA=de(Sv6vJ|F&UH)=mCB&3L*xgUiab1Yd5#Zs7etAs)Z^d*=cy469Jz z!$JYS;lGXmmWS15?|J{g-~69SEi4WzY2M?ZL4P!Z{}DK0aabMb9*+zC6aTL&1RDTW z+PDvJ7xtgA`y)wVaoFzl9@l&O$M%2svamF4r*%&sME>45Y~KYN0(OeI4Rqqkx_nq3kUjqfCL8zNcr{Y{{Rf{vvB|b literal 0 HcmV?d00001 diff --git a/build/openid-wise-profile-1_0.html b/build/openid-wise-profile-1_0.html index c2d049a..44a0ba0 100644 --- a/build/openid-wise-profile-1_0.html +++ b/build/openid-wise-profile-1_0.html @@ -7,6 +7,7 @@ OpenID WISE Profile Specification 1.0 - draft 00 + July 2026 -Lombardo & Sneeggen +Lombardo, et al. Standards Track [Page] @@ -1248,6 +1249,10 @@
D. Sneeggen
Dendro
+
+
S. O'Dell
+
CVS Health
+
@@ -1372,6 +1377,17 @@

Abstract

2.6.3.  anomalous-behavior-detected

+ +
  • +

    2.7.  Supply Chain Events

    +
  • @@ -1403,6 +1419,9 @@

    Abstract

  • 4.5.  Relationship to Credential Freshness Models

    +
  • +
  • +

    4.6.  Supply Chain Signals

  • @@ -1463,6 +1482,9 @@

  • Runtime posture change notifications that may affect the trust evaluation of a workload.

    +
  • +
  • +

    Supply-chain changes including updated or revoked provenance, and changes to the vulnerability status of a workload's components that require relying parties to re-evaluate trust.

  • @@ -1867,7 +1889,7 @@

    2.2. Bound Key Lifecycle Events

    Bound keys are proof-of-possession keys cryptographically tied to a workload credential. They have an independent lifecycle from the credential itself. A credential may remain valid while its bound key is rotated or revoked, and a key compromise may be addressed without full credential revocation.

    -

    In the WIMSE model, the WIT contains a cnf claim binding a public key to the workload identity. The corresponding private key is used to produce Workload Proof Tokens (WPT). Bound keys in this context include DPoP proof keys, mTLS certificate-bound keys, and attestation keys used during posture evaluation.

    +

    In the WIMSE model, the WIT contains a cnf claim binding a public key to the workload identity. The corresponding private key is used to produce Workload Proof Tokens (WPT) [WPT]. Bound keys in this context include DPoP proof keys, mTLS certificate-bound keys, and attestation keys used during posture evaluation.

    @@ -2606,6 +2628,156 @@

    +
    +
    +

    +2.7. Supply Chain Events +

    +

    These events signal changes in a workload's supply chain including the provenance of the software it is built from and the vulnerability status of its components. The underlying detail such as as a Software Bill of Materials (SBOM), a build attestation, or a vulnerability advisory is typically held in a separate document maintained by other tooling. These events act as signals that inform a relying party that something relevant has changed, and where to obtain the detail, rather than carrying the full supply-chain record inline.

    +
    +
    +

    +2.7.1. workload-provenance-changed +

    +

    Event Type URI: https://schemas.openid.net/secevent/wise/event-type/workload-provenance-changed

    +

    The workload-provenance-changed event signals that the provenance of a workload, such as its SBOM or a build attestation has changed. This includes newly available or updated provenance, and the revocation or failed verification of previously trusted provenance. A relying party may re-evaluate its trust in the workload, or fetch the referenced document to assess the change.

    +

    Attributes:

    +
      +
    • +

      change_type - REQUIRED. The nature of the change. Possible values:

      +
        +
      • +

        updated - New or updated provenance (for example, a new SBOM) is available.

        +
      • +
      • +

        revoked - Previously trusted provenance or an attestation is no longer valid.

        +
      • +
      • +

        verification_failed - Verification of the workload's provenance failed.

        +
      • +
      +
    • +
    • +

      provenance_uri - OPTIONAL. A URI at which the affected provenance document can be retrieved.

      +
    • +
    • +

      provenance_format - OPTIONAL. A hint indicating the kind of document referenced, for example sbom or attestation.

      +
    • +
    • +

      artifact_digest - OPTIONAL. A digest of the workload artifact (such as a container image) that the provenance describes, allowing the relying party to correlate the event with what is running.

      +
    • +
    • +

      reason_admin - OPTIONAL. A human-readable description of the change, intended for administrators.

      +
    • +
    • +

      event_timestamp - OPTIONAL. The time the change occurred.

      +
    • +
    +

    The following example is non-normative.

    +
    +
    +
    +
    +{
    +  "iss": "https://authority.example.com/",
    +  "jti": "wise-evt-040",
    +  "iat": 1700000000,
    +  "aud": "https://rp.partner.example.net/wise",
    +  "events": {
    +    "https://schemas.openid.net/secevent/wise/event-type/workload-provenance-changed": {
    +      "subject": {
    +        "format": "uri",
    +        "uri": "wimse://trust.example.com/workload/payment-service"
    +      },
    +      "change_type": "revoked",
    +      "provenance_uri": "https://provenance.example.com/payment-service/attestation",
    +      "reason_admin": "Build provenance attestation revoked by source repository owner"
    +    }
    +  }
    +}
    +
    +
    +
    Figure 11: +Example: Workload Provenance Changed +
    +
    +
    +
    +
    +
    +

    +2.7.2. workload-vulnerability-status-changed +

    +

    Event Type URI: https://schemas.openid.net/secevent/wise/event-type/workload-vulnerability-status-changed

    +

    The workload-vulnerability-status-changed event signals a change in the status of a vulnerability with respect to a workload. The status values follow the Vulnerability Exploitability eXchange (VEX) model [VEX], which distinguishes whether a workload is actually affected by a known vulnerability. This allows a transmitter both to warn a relying party that a workload has become affected, and to relax a prior warning when a vulnerability is found not to apply or has been fixed.

    +

    Attributes:

    +
      +
    • +

      vulnerability_id - REQUIRED. A public identifier for the vulnerability, such as a CVE identifier.

      +
    • +
    • +

      status - REQUIRED. The status of the workload with respect to the vulnerability, following the VEX model [VEX]. Possible values:

      +
        +
      • +

        affected - Actions are recommended to remediate or address the vulnerability.

        +
      • +
      • +

        not_affected - No remediation is required (for example, the vulnerable code is not reachable).

        +
      • +
      • +

        fixed - This workload contains a fix for the vulnerability.

        +
      • +
      • +

        under_investigation - Whether the workload is affected is not yet known.

        +
      • +
      +
    • +
    • +

      severity - OPTIONAL. A qualitative severity to help the relying party prioritise. Possible values: low, medium, high, critical.

      +
    • +
    • +

      advisory_uri - OPTIONAL. A URI at which a full advisory or VEX statement can be retrieved.

      +
    • +
    • +

      reason_admin - OPTIONAL. A human-readable description, intended for administrators.

      +
    • +
    • +

      event_timestamp - OPTIONAL. The time the status changed.

      +
    • +
    +

    The following example is non-normative.

    +
    +
    +
    +
    +{
    +  "iss": "https://authority.example.com/",
    +  "jti": "wise-evt-041",
    +  "iat": 1700000000,
    +  "aud": "https://rp.partner.example.net/wise",
    +  "events": {
    +    "https://schemas.openid.net/secevent/wise/event-type/workload-vulnerability-status-changed": {
    +      "subject": {
    +        "format": "uri",
    +        "uri": "wimse://trust.example.com/workload/payment-service"
    +      },
    +      "vulnerability_id": "CVE-2026-12345",
    +      "status": "affected",
    +      "severity": "critical",
    +      "advisory_uri": "https://advisories.example.com/CVE-2026-12345"
    +    }
    +  }
    +}
    +
    +
    +
    Figure 12: +Example: Workload Vulnerability Status Changed +
    +
    +
    +
    +
    +
    @@ -2727,6 +2899,14 @@

    These mechanisms are complementary, not mutually exclusive. Condition-bounded credentials reduce the local deprovisioning window but cannot observe externally originated changes: issuer policy withdrawal, trust anchor rotation, cross-domain incident response, or administrative decisions to terminate an established connection. WISE events address these cases. Deployments combining short-lived credentials with condition-liveness properties still benefit from issuer-side signalling for lifecycle changes that no local mechanism can detect.

    +
    +
    +

    +4.6. Supply Chain Signals +

    +

    Supply chain events are advisory inputs to a Receiver's own decision-making. A Receiver SHOULD treat a workload-vulnerability-status-changed event as information to be evaluated against its own policies, rather than as a directive to be enforced automatically. In particular, a Receiver SHOULD NOT block, revoke, or otherwise restrict a workload's access solely because such an event was received. It SHOULD weigh the event together with the referenced advisory, the reported status and severity, and its own risk posture before deciding what action, if any, to take. A revoked provenance change, once validated, indicates that the affected provenance MUST NOT be relied upon.

    +
    +
    @@ -2798,9 +2978,13 @@

    Rosomakho, Y. and J. Salowey, "Workload Identifier", , <https://datatracker.ietf.org/doc/draft-ietf-wimse-identifier/>.
    [WIMSE-CRED]
    -
    +
    Campbell, B., Salowey, J., Schwenkschuster, A., Sheffer, Y., and Y. Rosomakho, "WIMSE Workload Credentials", , <https://datatracker.ietf.org/doc/draft-ietf-wimse-workload-creds/>.
    +
    [WPT]
    +
    +Campbell, B. and A. Schwenkschuster, "WIMSE Workload Proof Token", , <https://datatracker.ietf.org/doc/draft-ietf-wimse-wpt/>.
    +

    @@ -2827,9 +3011,13 @@

    Kasselman, P., Hardt, D., and A. Schwenkschuster, "AI Agent Authentication and Authorization", , <https://www.ietf.org/archive/id/draft-klrc-aiagent-auth-02.html>.
    [CIMD]
    -
    +
    Parecki, A., "Client ID Metadata Document", , <https://www.ietf.org/archive/id/draft-parecki-oauth-client-id-metadata-document-07.html>.
    +
    [VEX]
    +
    +"Minimum Requirements for Vulnerability Exploitability eXchange (VEX)", , <https://www.cisa.gov/resources-tools/resources/minimum-requirements-vulnerability-exploitability-exchange-vex>.
    +
    @@ -2848,10 +3036,20 @@

    Document History

    -

    -00

    +

    -01

    • -

      Initial draft.

      +

      Added Supply Chain Events

      +
    • +
    +

    -00

    +
      +
    • +

      Initial draft. +-00

      +
    • +
    • +

      Initial draft.

    @@ -2866,7 +3064,7 @@

    Amazon Web Services
    @@ -2877,6 +3075,14 @@

    +
    +
    Sean O'Dell
    +
    CVS Health
    + +