@silverpill@mitra.social it seems like a fair starting point to establish some common formats. There's clearly a lot of work still to be done.
There are some choices that seem questionable to me; the document seems to imply that KeyPackages as an attribute of the Actor objects can be retrieved without much control. I think that's problematic. They're only usable one time and they could easily be exhausted if distribution isn't controlled (they have to be replenished by the client and the client has to maintain all active packages in its key store).
I gate access behind a verified signature and record who is given which package at the server to establish some limits.