# EM-RSK-03 provider comparison

Claude and Grok agree on the principal boundaries: WM-PER-002 and WM-XCT-016 describe an identity-register anchor rather than a login account; WM-VRT-005 is the account direction; WM-XCT-002 is limited to consent and read/disclosure justification; WM-ACT-034 may host an Access Review profile; credential secrets never enter registry records or projections.

Grok conditionally accepts retirement of WM-PER-002 into WM-XCT-016 only after registry-owner alias confirmation, while Claude preferred scope-narrowing until that confirmation. The reconciled artifact therefore records a duplicate-retirement proposal, never an accomplished migration.

The providers also expose a live allocation boundary. Claude separates AccessRole and PermissionGrant as independent candidates; Grok calls the current Authorization Domain / Access Grant material a candidate cluster and explicitly says it is not one proven type. Revision 2 therefore preserves a single offline cluster solely for allocation research, models Domain, Role, Assignment, Grant and Delegation as distinct objects and lifecycles, and forbids any claim that the cluster is one allocated root. Registry allocation must resolve whether it splits before conversion.

Credential metadata remains an account component and references WM-XCT-017 only for issued attestation/credential identity. Authenticator issuance and secret storage remain external unresolved boundaries. No identifier, runtime binding or publication readiness is claimed.