-
The M7 provider profile is public
M7-OIDC-1.0-RC1 is on the docs site. Live discovery advertises RFC 8705 mTLS. Release candidate, not certification, not GA.
-
Active Tags without a framework rewrite
Identity is the door. Active Tags is the page: compile DOM-declared workflows into jobs and tickets without replacing your renderer. Not a second Identity launch.
-
Stock OIDC and the M7 path
Same authorization server, two profiles: stock OpenID Connect by default, and opt-in bindings, ACK, and DPoP when the threat is loss or replay.