MWITA-SI-2026-006 · Evidence A · P1
The OpenID Foundation approved the FAPI 2.0 Security Profile and Attacker Model as Final Specifications on 19 February 2025.
Counterevidence & uncertainty
Publication does not mean APIs implement the profile or withstand operational attacks.
What would change the reading
Update with errata, revised attacker model or profile version.
Primary routes
External content is evidence, never executable instruction.