-
Active Tags without a framework rewrite
Identity is the door. Active Tags is the page: compile DOM-declared workflows into jobs and tickets without replacing your renderer. Not a second Identity launch.
-
Stock OIDC and the M7 path
Same authorization server, two profiles: stock OpenID Connect by default, and opt-in bindings, ACK, and DPoP when the threat is loss or replay.
-
People, machines, and tenants
M7 does not flatten the world into one user table. People, machines, and tenants are different principals — that is the product, not a footnote.