[MINUTES] W3C CCG Traceability Call - 2023-09-19

Thanks to russell_h_(mesur.io) and Our Robot Overlords and russell_h_(mesur.io) for scribing this week!

The transcript for the call is now available here:


Full text of the discussion follows for W3C archival purposes.
Audio of the meeting is available at the following location:


Verifiable Traceability Task Force Transcript for 2023-09-19

  Orie Steele, Mike Prorock, Mahmoud Alkhraishi
  russell_h_(mesur.io) and Our Robot Overlords and russell_h_(mesur.io)
  Nis Jespersen , Russell H (mesur.io), Benjamin Collins, Mahmoud 
  Alkhraishi, Chris Abernethy, Orie Steele, TallTed // Ted 
  Thibodeau (he/him) (OpenLinkSw.com)

russell_h_(mesur.io) is scribing.
Our Robot Overlords are scribing.
russell_h_(mesur.io) is scribing.
Nis Jespersen : 
Nis Jespersen : 
Nis Jespersen : 
Nis Jespersen :  Diving into interop
Mahmoud Alkhraishi:  Work to be done on waybill?
Nis Jespersen :  Not inlined, how we like to inline docs. Based 
  on iata's very elaborate reqs, aligns very well to iata paper 
  template. That part's solid
Mahmoud Alkhraishi:  So some work on internal structure we're 
  using, but pretty in line with reqs of paper doc
Nis Jespersen :  Yes, why?
Mahmoud Alkhraishi:  A customer asked, brought up iata airwaybill
Nis Jespersen : 
Nis Jespersen :  Yeah, never been tested in wild but a lot of 
  stuff, aligned with reqs, safe to point them at that
Nis Jespersen : 
Nis Jespersen :  Least recently updated issues interop
Mahmoud Alkhraishi:  10 Issues all straightfwd, rephrase or 
  restructure etc., haven't found time
Nis Jespersen : 
Nis Jespersen :  Pinging you on ticket
Chris Abernethy:  Been out of office, don't think anything 
  needed, ready for PR
Nis Jespersen : 
Nis Jespersen :  482, Chris?
Nis Jespersen :  Oh, marked pending vc 2.0 upgrade. remove 
  assignee mahmoud?
Mahmoud Alkhraishi:  Keep, happy to stay on it and do it, just 
  hold off
Nis Jespersen : 
Nis Jespersen :  506, Mike, to orie. Orie, anything you need?
Orie Steele:  No, blocked by VC 2.0 work I think. Ik want to 
  support, some crypto algs want to rec, know what they are, could 
  put text around this now... could address without adding 
  examples, "sig base securing mechanisms rec'd to use base [?] or 
Nis Jespersen :  So don't put 2.0 label?
Orie Steele:  Mark as ready for PR, just needs respec text to 
Nis Jespersen : 
Nis Jespersen : 
Nis Jespersen :  552, Me, adding interop test for gs1 
  credentials. Pinging myself, also ready for PR
Chris Abernethy:  Placeholder for us to update openapi spec, have 
  some examples where content of signed items mmodified for reasons 
  but sigs not regenerated, so examples not internally consistent 
  so should be updated
Nis Jespersen :  We don't sign examples anymore, on vocab
Chris Abernethy:  Possible things have changed since opened, if 
  have could investigate and close
Orie Steele:  So, duplicating testing across interop & vocab?
Chris Abernethy:  Not to do with testing, it's bc including 
  examples in openapi texts for requests. If someone actually tries 
  examples and it doesn't do what wants
Orie Steele:  Wait for 2.0, use those examples
Nis Jespersen :  So adding wait for 2.0 label
Orie Steele:  Still on 479, says soemthing on schemas, if any req 
  on proof for yaml files that needs to be addressed, cause that'll 
  block 2.0 - what comment from 1 month ago says
Chris Abernethy:  Agree but not sure it applies here
Chris Abernethy:  These aren't examples in specs, they're in 
Orie Steele:  Would recommend not having examples in openapi with 
Mahmoud Alkhraishi:  How test creds verify if no proof
Mahmoud Alkhraishi:  Still testing v1. I understand v2 we remove, 
  but for now we keep?
Orie Steele:  My understanding, not try and support v1 + v2, at 
  some pt we make decision to switch all
Mahmoud Alkhraishi:  But today supporting v1. I think until that 
  day should stay in examples
Mahmoud Alkhraishi:  So chris no action item there if all on same 
Chris Abernethy:  So we leave as-is with incorrect?
Mahmoud Alkhraishi:  Suggest we regen proofs, but no action item 
  on removing proofs today
Nis Jespersen : +1
Orie Steele:  Would just leave as broken, won't matter, 
  unnecessary work
Chris Abernethy:  So close won't fix?
Orie Steele:  Yeah let's do that
Nis Jespersen : 
Nis Jespersen :  Any objections? great
Chris Abernethy:  Old one, placeholder to add conformance testing 
  for cred status endpts
Mahmoud Alkhraishi:  Do we have interop testing on creds status?
Chris Abernethy:  Not recalling
Mahmoud Alkhraishi:  Not do any work bc know going to be bunch of 
  work on v2 with status list changes
Orie Steele:  Agree
Mahmoud Alkhraishi:  So don't close but mark v2, wait until
Chris Abernethy:  Seconded
Nis Jespersen :  So removing 'ready for pr", adding "vc 2.0"
Nis Jespersen : 
Nis Jespersen :  483, Mahmoud?
Nis Jespersen : 
Mahmoud Alkhraishi:  Were testing for msg content, thought we 
  resolved this? did resolution we shouldn't care what message is, 
  just structure? & I think tests currently don't care. Ping me to 
Nis Jespersen : 
Nis Jespersen :  554, Will find time for it, pinging myself
<mahmoud> Apologies need to drop off now.
Chris Abernethy:  Trying to remember,  I think we opened some 
Nis Jespersen : 
Nis Jespersen :  Poking you, let's move on to 468, chris?
Chris Abernethy:  Method for referencing stored VCs, assigned to 
  me, I'll get to it ASAP
Orie Steele:  Should be alignment. When you have status list 
  should be able to store, if secure other than data integrity 
  proofs status list must be able to return in correct media type, 
  there aren't tests yet for that. & we wanted to reduce number of 
  media types to just be sd-jwt
Nis Jespersen :  Chris unsure if your pevious comment still 
  applies but, can we conclude we're not doing that?
Chris Abernethy:  Old, should just confirm we did what we were 
  going to do in initial suggestion
Orie Steele:  Agree, at a certain point close because stale, too 
  much to read and no longer actionability
Chris Abernethy:  Add pending close, give me another week to 
  confirm what want to confirm?
Nis Jespersen : 
Nis Jespersen :  Good call, adding note
Orie Steele:  We did this, ping him to confirm and close if it's 
  been done
Nis Jespersen : 
Nis Jespersen :  574, Russell
Nis Jespersen :  Still want to do these
Nis Jespersen : 
Orie Steele:  Not cwt, look into sign1, 
Orie Steele:  Good to provide respec guidance encouraging client 
  to request format. but also good guidance to let server respond 
  with whatever they'd like
Nis Jespersen :  So close this one? as it doesn't have to do with 
  server implementation?
Nis Jespersen : 
Nis Jespersen :  Ready for PR, will do the work
Nis Jespersen : 
Nis Jespersen : 
Nis Jespersen : 
Nis Jespersen : 
Nis Jespersen :  534, Mahmoud, who dropped as he said. pinging 
Chris Abernethy:  Iirc came out of giant PR mike did while back, 
  orie requested some issues to not lose track of things changed in 
Chris Abernethy:  Might be good to re-review respec see how much 
  is still relevant
Nis Jespersen : 
Nis Jespersen : 
Nis Jespersen :  589 From manu, align workflows in vc api and 
  trace, anyone familiar?
Orie Steele:  If we moved to more compact formats or other 
  security mechanisms, how much vc-api still relevant.
Nis Jespersen :  Isn't it more for them to align with us? If it 
  isn't, are we just using same term to describe two different 
Orie Steele:  Some historical context arnd work item. Original 
  vc-api didn't support any of our interop APIs. Interop work item 
  created to work on these APIs. Then they made incompatible 
  version of same APIs. Good to have diversity, but when you get to 
  standardization that's when you should aim at alignment.
Nis Jespersen :  Made comment, "discussed, no significant 
Nis Jespersen : 
Orie Steele:  Just specify only coming from transmute. Unsure if 
  openlink has implementation ted but open to comment as well.
Chris Abernethy:  In agreement with orie, opening can of worms to 
  do this right now
Orie Steele:  Ok say that, but comment transmute and mesur don't 
  plan on engaging in effort to perform alignment
Nis Jespersen :  Unsure if this is just my understanding, but I 
  think mahmoud is more invested in vc api than the rest of us.
Chris Abernethy:  I can do minutes

Received on Thursday, 21 September 2023 13:32:12 UTC