The text around the openid4vp_presentation item in the IAR endpoint is a little unclear:
-
About the origin to use in the session transcript - in particular whether to use the 'iar:' prefix or not. Maybe we shouldn't reuse the DC API session transcript at all but should define an IAR specific one in VCI. We also need to be clear about whether the origin in expected_origins is prefixed or not, ideally we need to have a consistent definition of 'origin' in this case.
-
The domain value to use in w3c vcs being presented is not clear
-
Oliver & Christian suggested that moving some of the text about the audience to the format profiles in the appendixes to make some of the above things clearer.