`/.well-known/change-password` to REC?

Hey folks,

We have implementations of
https://w3c.github.io/webappsec-change-password-url/ across multiple
servers, and client-side usage of that redirect in multiple browsers.

https://w3c.github.io/webappsec-change-password-url/response-code-reliability.html
is likewise "implemented" by many servers.

Is there work left to do on those documents before moving them down the
track towards REC? There are a number of issues open at
https://github.com/w3c/webappsec-change-password-url/issues/, but it's not
clear to me which of them (if any) need to be addressed before proceeding.

-mike