Create 2025-10-08.md

Author: elf-pavlik

meetings/2025-10-08.md

@@ -0,0 +1,67 @@
+# W3C Solid Community Group: Weekly
+
+* Date: 2025-10-08:00:00Z
+* Call: https://meet.jit.si/solid-cg
+* Repository: https://github.com/solid/specification
+
+## Chair
+
+* [elf Pavlik](https://elf-pavlik.hackers4peace.net)
+
+## Present
+* Tom Byrd
+* [Luke Dary](https://w3c.social/@lukedary)
+* [Michal](https://id.mrkvon.org) (late)
+
+## Regrets
+
+
+## Scribes
+
+
+---
+
+## Announcements
+
+### Meeting Guidelines
+* [W3C Solid Community Group Calendar](https://www.w3.org/groups/cg/solid/calendar).
+* [W3C Solid Community Group Meeting Guidelines](https://github.com/w3c-cg/solid/blob/main/meetings/README.md).
+* No audio or video recording, or automated transcripts without consent. Meetings are transcribed and made public. If consent is withheld by anyone, recording/retention must not occur.
+* Join queue to talk.
+* Topics can be proposed at the bottom of the agenda to be discussed as time allows. Make it known if a topic is urgent or cannot be postponed.
+
+### Participation and Code of Conduct
+* [Join the W3C Solid Community Group](https://www.w3.org/community/solid/join), [W3C Account Request](http://www.w3.org/accounts/request), [W3C Community Contributor License Agreement](https://www.w3.org/community/about/agreements/cla/)
+* [Solid Code of Conduct](https://github.com/solid/process/blob/main/code-of-conduct.md), [Positive Work Environment at W3C: Code of Conduct](https://www.w3.org/policies/code-of-conduct/)
+* Operating principle for effective participation is to allow access across disabilities, across country borders, and across time. Feedback on tooling and meeting timing is welcome.
+* If this is your first time, welcome! please introduce yourself.
+
+---
+
+
+## Introductions
+
+
+## Review Action items
+
+
+## Topics
+
+### Pull Requests
+
+### Tracking obstacles
+
+### Demo: mallory toolkit
+
+https://elf-pavlik.github.io/mallory/rimraf/
+
+* eP: Very early seed of a toolkit to prototype malicious Solid apps and demonstrate well known vulnerabilities. Link after the demo
+* eP: MdJ demo of ACP app permissioning https://youtu.be/5Q1nUmGdaXE
+
+![image](https://hackmd.io/_uploads/H1GrEeEpex.png)
+
+* LD: Auth screen can communicate risks better. Server responding to that request should protect user. It should take a negative look at what could be bad about it. If you don't want them to do that, create another pod.
+* eP: Next week I can show https://sai.js.org auth screen. A very early wireframe is also available in https://solid.github.io/data-interoperability-panel/primer/authorization-agent.html#gathering-authorizations
+
+## Actions
+