Issues

• Limit ways to pass credential ID for deletion

  effort: lowpr existsv1.0
  w3c/vcalm#750 · Filter by author kezike opened on Nov 6, 2026
  

• Ensure Threat Model DFD is up to date after content PR is complete

  effort: lowthreat-model
  w3c/vcalm#749 · Filter by author eric-schuh opened on Nov 3, 2026
  

• "for legacy" *what*? "for legacy support" maybe?

  pr exists
  w3c/vcalm#747 · Filter by author TallTed opened on Oct 28, 2026
  

• Refine architecture diagram for TAG review

  v1.0-cr-blockerv1.0
  w3c/vcalm#746 · Filter by author kezike opened on Oct 27, 2026
  

• acceptedMethods and acceptedEnvelopes definitions are not rendering properly

  v1.0-cr-blockerv1.0
  w3c/vcalm#740 · Filter by author kezike opened on Oct 20, 2026
  1

• Allow an application-defined payload in the final exchange message after a successful DIDAuthentication

  w3c/vcalm#733 · Filter by author harleytrustprovenance opened on Oct 11, 2026
  2

• Clarify that all queries in a VPR that do not define a group are in the same "undefined" group

  effort: lowpr existsv1.0
  w3c/vcalm#730 · Filter by author dlongley opened on Sep 29, 2026
  

• Sync threat file names with changes to threat names

  effort: lowready for PRthreat-model
  w3c/vcalm#726 · Filter by author eric-schuh opened on Sep 22, 2026
  

• created field is defined as a string?

  i18n-needs-resolutionpr existsv1.0
  w3c/vcalm#725 · Filter by author aphillips opened on Sep 17, 2026
  

• Use more globally correct example; editorial nit

  i18n-needs-resolutionpr existsv1.0
  w3c/vcalm#724 · Filter by author aphillips opened on Sep 17, 2026
  

• Documenting localizable text in examples

  i18n-needs-resolutionpr existsv1.0
  w3c/vcalm#723 · Filter by author aphillips opened on Sep 17, 2026
  

• Review R41 on T38

  effort: lowready for PRthreat-model
  w3c/vcalm#722 · Filter by author eric-schuh opened on Sep 16, 2026
  1

  

• Question: should we add ipex to protocols list for KERI/ACDC ecosystem?

  w3c/vcalm#718 · Filter by author ottonomy opened on Sep 8, 2026

• Add example VPR that would be used with credentialOffer

  ready for PR
  w3c/vcalm#717 · Filter by author eric-schuh opened on Sep 8, 2026
  

• Handle property duplication problem from oneOf pattern

  ready for PR
  w3c/vcalm#715 · Filter by author eric-schuh opened on Sep 1, 2026
  

• Update threat-model/README.md to be VCALM specific

  threat-model
  w3c/vcalm#714 · Filter by author jandrieu opened on Sep 1, 2026

• Handling the unregistered application/mdoc media type.

  effort: lowpr existsv1.0
  w3c/vcalm#712 · Filter by author BigBlueHat opened on Aug 28, 2026
  1

  

• Add ephemeral requester-initiated exchanges profile

  w3c/vcalm#710 · Filter by author dmitrizagidulin opened on Aug 25, 2026
  7

• Provide a mermaid diagram that illustrates interaction chaining

  pr existsv1.0
  w3c/vcalm#702 · Filter by author kezike opened on Aug 11, 2026
  

• Internationalization Self-Review Questionnaire for VCALM v1.0

  v1.0-cr-blockerv1.0
  w3c/vcalm#697 · Filter by author kezike opened on Aug 11, 2026
  

• Accessibility Self-Review Questionnaire for VCALM v1.0

  v1.0-cr-blockerv1.0
  w3c/vcalm#696 · Filter by author kezike opened on Aug 11, 2026
  

• Security and Privacy Self-Review Questionnaire for VCALM v1.0

  v1.0-cr-blockerv1.0
  w3c/vcalm#695 · Filter by author kezike opened on Aug 11, 2026
  

• Consider including recipientPublicJwk (or similarly named) property in VPR for encrypted responses

  pr existsv1.0-cr-blockerv1.0
  w3c/vcalm#693 · Filter by author dlongley opened on Aug 5, 2026
  1

  

• Include optional credentialOffer property in a VPR that announces VCs to be issued in step

  pr existsv1.0-cr-blockerv1.0
  w3c/vcalm#689 · Filter by author dlongley opened on Aug 1, 2026
  1

  

• Consider normatively/non-normatively adding site display information in interaction URL response

  w3c/vcalm#688 · Filter by author dlongley opened on Jul 31, 2026
  1