Repository navigation
§ 1.2, § 4.1, § 5.8 — Parties: who they are, and what each identity layer proves (#61, #62) - #139
Open
KonstantinMirin wants to merge 28 commits into
Open
KonstantinMirin wants to merge 28 commits into
KonstantinMirin wants to merge 28 commits into
Conversation
A proposal can say its line items must be bought together (linked_execution, § 4.1), and a line item can name the line items or spend that must be in the same commitment (requires, § 5.6.3). A bonus line is a line item with requires and its own price. The § 2 "binding terms" hook now points at a field, and the Summary Representation carries has_requires and linked_execution. Adds a CTV bonus line example (§ 6.5) and linked_execution: none to the proposal example. Refs IABTechLab#23
The seller declares which exclusion types it accepts and how it
enforces each (exclusions_accepted); the buyer supplies its lists
(exclusions). Blocked apps carry their store, { platform, bundle },
so one store id is never applied across stores. Exclusions are
recompute inputs (§ 3.3) and are never disclosed to other parties
(§ 5.8). The display example declares and supplies lists.
Refs IABTechLab#25
A commitment names the proposal and version it was priced against (§ 5.6.1). The seller rejects a new attempt on a stale version, or past valid_until or price_valid_until, and returns the current version. An authenticated replay with the same idempotency_key and terms returns the stored result without re-running those checks; the same key with different terms is a conflict. Keys are opaque and scoped to one buyer and seller pair. § 4.1 states that each revision while published increments version. The display, CTV and audio examples carry proposal_id and version. Refs IABTechLab#24
§ 5.8 adds terms_ref ({ url, sha256, version }), REQUIRED when
terms_acceptance_required is true, hash-pinned and frozen at agreed, so
assent binds to an exact document. § 5.10 adds agreement_ref, an
informative pointer to the master or annual agreement a line item is
priced under, and documents the io and agreement roles on
external_references[]. IO generation is stated to be a connector
concern, and § 7 adds a non-normative note on relationships.
agreement_ref is seller-set; a buyer-held agreement id travels as an
external_references[] entry with role: agreement, so the field keeps
one marker (§ 3).
Appendix A gains two rows; Appendix B counts seller-set 29 → 31 and
73 fields. The display example carries terms_ref.
Refs IABTechLab#27
A new § 2.3 lets a seller publish its public standard line items at /.well-known/openproposal.json: seller_id, generated_at, spec_version and, per proposal, proposal_id, version, the Summary Representation of each line item and a full_url. ETag / Last-Modified are required, only line items with visibility public appear, and entries must match the current version. Buyers discover from the manifest, then fetch the Full Representation of shortlisted line items. Adds examples/manifest.json (§ 6.5) and visibility: public to the CTV and audio examples; the registry_gated display line item is not listed. Refs IABTechLab#29
The specification does not define authentication yet (WS1; see IABTechLab#62), so the replay rule now applies to a replay from the same buyer rather than an authenticated replay. Refs IABTechLab#24
agreement_ref.parties used buyer_id, which the specification does not define. parties[] now names the seller by its seller_id and the buyer by the id it holds in eligible_bidders[] (section 5.8). Refs IABTechLab#27
The rule that a hold on a linked_execution: all proposal uses hold_scope: proposal came from a comment on IABTechLab#23, not the change request as filed. It moves to the PR description as a point for the working group, so this PR carries only the filed change. Refs IABTechLab#23
IABTechLab#25 names the content-category list iab_content_category[], a list of IAB Content Taxonomy ids. The earlier commit renamed it content_category with a version-pinned taxonomy_ref, which nobody proposed. This restores the filed name and shape; which taxonomy version to reference is left to the working group. Refs IABTechLab#25
Read the media condition from the ad served when an impression accepts several media, name the seller as the party that serves, place linear TV outside the table, and state environments as (distribution channel, device type) pairs. Insert environments.available[] into the summary list without rewrapping it, shorten the changelog entry and drop audio_streaming from OQ-7 in docs/open-questions.md. Refs IABTechLab#90
"At least one of" an empty list is never satisfied, so the bonus line would fail a literal check. An absent key sets no condition. Only the examples change; the any_of[] row and the rules stay as filed in IABTechLab#23. Refs IABTechLab#23
From the Postindustria review on IABTechLab#73: - a replay matches on the same body, every value the buyer sent except idempotency_key, and returns the stored result whether an acceptance or a rejection; a retry against a new version uses a new key; - version increments on each revision of the proposal, not only while published, so a counter under review also moves it; - "deterministic" now says what the checks depend on: the stored proposal and the time the seller receives the attempt; - the price check names the pricing[] entry the commitment is priced against. Refs IABTechLab#24
Give each repeated concept one type in section 2.2, and state the table, presence, type, key, and value rules in section 2.6. Add Type and Required columns to every field and key table. Add the lifecycle, recorded, asserted, and mixed markers, and a line_items[] field. Define the Summary as a strict path subset, with manifest key tables. Delete catalog_ref. Rename the time, reference, delta, cap, and path fields to use the shared types. Number every heading, and keep issue citations and edit history out of normative text. Update the examples, the manifest, the appendices, and the docs. Teach check_appendix.py the new columns and a closed layout list, and add check_examples.py, which checks the examples against the spec's tables.
Add section 2.4: a rejection returns errors[], one or more ErrorObjects with an open code list, retry values that read for any request, and informative HTTP fits. Name the code each rejection in sections 5.5, 5.6.1, and 5.6.3 returns, and drop the requires cycle ban. Add the Ext type and section 2.5: ext on the proposal and each line item, keyed by owner domain, ignored and kept when not understood, and frozen at agreed. Make spec_version a required proposal field, and ask in section 8 how a receiver reads a later release. Add informative security considerations in section 2.7. Word the open questions without a count. Update the examples and appendices, and teach check_examples.py the Ext type and the open ErrorObject.
Make seller a Party in section 4.1, with a required legal_name, and add
buyer and commitment.advertisers[]. Move the registry_id rules to Party
in section 2.2, and scope proposal_id to seller.domain.
Add section 1.2 with the three identity layers. In section 5.8, require
visibility, define each value, and separate who may read from who may
commit. Eligibility is a resolve step that returns not_eligible, and an
unreadable line item returns not_found. A required credential is
{ credential_type, issuer }, and eligible_bidders[] splits into
eligible_buyers[] and eligible_seats[].
Give buyer_requirements, billing, and agreement key tables, and convert
the rows the terms and agreement change added. In section 2.3, drop the
manifest seller_id and filter on status, and ask in section 8 whether a
manifest needs both validators. Update the examples, appendices, and
checkers.
This was referenced Nov 4, 2026
Open
Open
Open
Open
Open
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What this changes
In draft 1, the seller is a registry id, the buyer is unnamed, and no rule defines who each
visibilityvalue admits. This PR names both parties and what each identity layer proves.sellerandbuyerarePartyvalues, each with a REQUIREDlegal_name.registry_idrules toParty.proposal_idis unique withinseller.domain.commitment.advertisers[]. Acommitmentresolves only for an eligible buyer.visibilityis REQUIRED, and each value says who may read. Who may commit is a separate test, andeligible_bidders[]splits into buyers and seats. A failure returnsnot_eligible; an unreadable line item returnsnot_found.buyer_requirements,billing, andagreementkey tables.seller_idand lists onlypublishedline items. A buyer discards an entry for another domain. One ofETagandLast-Modifiedis enough; § 8 question 11 asks about both.Related issue
Closes #61. Closes #62. Both are Postindustria (IAB Tech Lab member) change requests.
Refs #126, #29, #57, IABTechLab/AAMP#3, #26, #74, #132, #59, #75, #27, #76.
Builds on
This PR builds on our errors and extensions PR, which builds on our shared types PR. Through them, it carries #118 by @aleksUIX, #70 and #71 by @Sirajmx, and #73 and #76 by @Kishore-2572. It also carries #75 by @Kishore-2572, at its head. The last commit also renames #75's
agreement_reftoagreement, with a key table. Review the last commit; the earlier ones belong to the PRs it builds on.Type
Checklist
visibilityREQUIRED;scripts/check_appendix.pypassesseller-set38 → 39; 81 → 82 fieldsexamples/is updated and still parses — two examples updated,manifest.jsonregenerated;scripts/check_examples.pypassesselectabledeclaresavailable[]andincluded[]; anythingsettabledeclares bounds (§ 3.1, § 3.2) — none addedKnock-on effects
seller_id,seller_name,eligible_bidders[], andagreement_refare gone. The CHANGELOG maps the other keys. A line item withoutvisibilityis invalid.commitment.advertisers[]answers @EvgenyAndroid's #126.statusfilter follows our review of #76; the other § 2.3 rules are new.namedandeligible_buyers[]serve @Kishore-2572's issued proposals ([Change] § 4.1 — Proposal templates and issued proposals (proposal_template_id) #26, § 4.1, § 7 — Proposal templates and issued proposals (#26) #74).seller_domainandseller_idbecomeseller.domainandseller.registry_id. [Change] § 5.8 — required_credentials[].scheme is an eligibility credential, not agent authentication #62 keptid_required,dsp_seat, andcustom; this PR removes them. Our [Comment] §§ 4.1, 5.6.1, 5.8 — Authorization evidence should travel with the transaction #57 reply called an over-mandate commitment a decline; here it's a rejection.assent[]entries and says whenbuyeris written. Our PR on what is signed moves the first § 1.2 layer under § 2.8, and turnsterms_refintoterms_refs[]. Our post-agreement PR adds which document governs what ([Comment] § 1 — Two documents define the Proposal; say which governs what #59). Our handoff PR mapsbuyer_requirements.seatsto the Deals API ([Change] § 1.1, § 5.9, § 5.10 — Carry the Deals API deal: its id, its origin, and the buyer's seats #132). Our pricing and settlement PRs add § 8 questions 9 and 10; until then, GitHub shows 11 as 9.By opening this pull request I agree my contribution may be published under this
repository's licence, as set out in CONTRIBUTING.md.
Analyzed and generated with the help of Claude, fully reviewed by me.