# Independent review request: EM-RSK-03 Access, Delegation and Secret Metadata

Review this boundary independently. Proposed: retire duplicate WM-PER-002 into WM-XCT-016 because both point to legacy R4 Identity Register; complete/profile WM-VRT-005 as Digital Account; reuse WM-XCT-002 only for consent/read-disclosure grants; create one identifier-unassigned Authorization Domain / Access Grant candidate containing access roles, assignments, permission grants and attenuated delegated grants; profile WM-ACT-034 for Access Review; reuse WM-XCT-001/004/007 for delegation authority, audit and enforcement; keep Credential Metadata as an account/anchor component. Test assignment change revoking only conditioned grants while retaining separately justified grants, with no secret exposure. Return <=1000 words: Verdict; duplicate/account boundary; role/grant/delegation; consent; review/revocation; credential metadata; invariants; scenario; blockers. Challenge whether Credential Metadata already needs an independent model. Do not invent identifiers or claim canonical completeness.