diff --git a/index.html b/index.html
index 1143b1051..a16885260 100644
--- a/index.html
+++ b/index.html
@@ -6,7 +6,7 @@
   <meta content="ED" name="w3c-status">
   <meta content="Bikeshed version 6edc88947, updated Thu Aug 17 11:18:09 2023 -0700" name="generator">
   <link href="https://www.w3.org/TR/webauthn-3/" rel="canonical">
-  <meta content="410d0f7ccf601c1e6eb8ab87d18e260ac430daff" name="document-revision">
+  <meta content="40be3dbfbfefc151a6ffb59d8ef902a324028585" name="document-revision">
 <style type="text/css">
 body {
     counter-reset: table;
@@ -914,7 +914,7 @@
   <div class="head">
    <p data-fill-with="logo"><a class="logo" href="https://www.w3.org/"> <img alt="W3C" height="48" src="https://www.w3.org/StyleSheets/TR/2021/logos/W3C" width="72"> </a> </p>
    <h1>Web Authentication:<br>An API for accessing Public Key Credentials<br>Level 3</h1>
-   <p id="w3c-state"><a href="https://www.w3.org/standards/types#ED">Editor’s Draft</a>, <time class="dt-updated" datetime="2023-08-25">25 August 2023</time></p>
+   <p id="w3c-state"><a href="https://www.w3.org/standards/types#ED">Editor’s Draft</a>, <time class="dt-updated" datetime="2023-09-06">6 September 2023</time></p>
    <details open>
     <summary>More details about this document</summary>
     <div data-fill-with="spec-metadata">
@@ -2536,8 +2536,8 @@ <h3 class="heading settled" data-level="5.1" id="iface-pkcredential"><span class
     <dd data-md>
      <p>This <a data-link-type="dfn" href="https://tc39.github.io/ecma262/#sec-object-internal-methods-and-internal-slots" id="ref-for-sec-object-internal-methods-and-internal-slots⑤">internal slot</a> contains the results of processing client extensions requested by the <a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party⑨③">Relying Party</a> upon the <a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party⑨④">Relying Party</a>'s invocation of either <code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#dom-credentialscontainer-create" id="ref-for-dom-credentialscontainer-create⑤">navigator.credentials.create()</a></code> or <code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#dom-credentialscontainer-get" id="ref-for-dom-credentialscontainer-get①①">navigator.credentials.get()</a></code>.</p>
    </dl>
-   <p><code class="idl"><a data-link-type="idl" href="#publickeycredential" id="ref-for-publickeycredential①⓪">PublicKeyCredential</a></code>'s <a data-link-type="dfn" href="https://webidl.spec.whatwg.org/#dfn-interface-object" id="ref-for-dfn-interface-object②">interface object</a> inherits <code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#credential" id="ref-for-credential⑥">Credential</a></code>'s implementation of <code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#collectfromcredentialstore-origin-options-sameoriginwithancestors" id="ref-for-collectfromcredentialstore-origin-options-sameoriginwithancestors">[[CollectFromCredentialStore]](origin, options, sameOriginWithAncestors)</a></code>, and defines its own
-implementation of <code class="idl"><a data-link-type="idl" href="#dom-publickeycredential-create-slot" id="ref-for-dom-publickeycredential-create-slot①">[[Create]](origin, options, sameOriginWithAncestors)</a></code>, <code class="idl"><a data-link-type="idl" href="#dom-publickeycredential-discoverfromexternalsource-slot" id="ref-for-dom-publickeycredential-discoverfromexternalsource-slot①">[[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors)</a></code>, and <code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#store-credential-sameoriginwithancestors" id="ref-for-store-credential-sameoriginwithancestors">[[Store]](credential, sameOriginWithAncestors)</a></code>.</p>
+   <p><code class="idl"><a data-link-type="idl" href="#publickeycredential" id="ref-for-publickeycredential①⓪">PublicKeyCredential</a></code>'s <a data-link-type="dfn" href="https://webidl.spec.whatwg.org/#dfn-interface-object" id="ref-for-dfn-interface-object②">interface object</a> inherits <code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#credential" id="ref-for-credential⑥">Credential</a></code>'s implementation of <code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#dom-credential-collectfromcredentialstore-slot" id="ref-for-dom-credential-collectfromcredentialstore-slot">[[CollectFromCredentialStore]](origin, options, sameOriginWithAncestors)</a></code>, and defines its own
+implementation of each of <code class="idl"><a data-link-type="idl" href="#dom-publickeycredential-create-slot" id="ref-for-dom-publickeycredential-create-slot①">[[Create]](origin, options, sameOriginWithAncestors)</a></code>, <code class="idl"><a data-link-type="idl" href="#dom-publickeycredential-discoverfromexternalsource-slot" id="ref-for-dom-publickeycredential-discoverfromexternalsource-slot①">[[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors)</a></code>, and <code class="idl"><a data-link-type="idl" href="#dom-publickeycredential-store-slot" id="ref-for-dom-publickeycredential-store-slot">[[Store]](credential, sameOriginWithAncestors)</a></code>.</p>
    <h4 class="heading settled" data-level="5.1.1" id="sctn-credentialcreationoptions-extension"><span class="secno">5.1.1. </span><span class="content"><code>CredentialCreationOptions</code> Dictionary Extension</span><a class="self-link" href="#sctn-credentialcreationoptions-extension"></a></h4>
    <p>To support registration via <code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#dom-credentialscontainer-create" id="ref-for-dom-credentialscontainer-create⑥">navigator.credentials.create()</a></code>, this document extends
 the <code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#dictdef-credentialcreationoptions" id="ref-for-dictdef-credentialcreationoptions">CredentialCreationOptions</a></code> dictionary as follows:</p>
@@ -2991,7 +2991,7 @@ <h4 class="heading settled" data-level="5.1.4" id="sctn-getAssertion"><span clas
 should be available without <a data-link-type="dfn" href="https://w3c.github.io/webappsec-credential-management/#user-mediated" id="ref-for-user-mediated②">user mediation</a> (roughly, this specification’s <a data-link-type="dfn" href="#authorization-gesture" id="ref-for-authorization-gesture①③">authorization gesture</a>), and if it does not find
 exactly one of those, it then calls <code>PublicKeyCredential.<code class="idl"><a data-link-type="idl" href="#dom-publickeycredential-discoverfromexternalsource-slot" id="ref-for-dom-publickeycredential-discoverfromexternalsource-slot②">[[DiscoverFromExternalSource]]()</a></code></code> to have
 the user select a <a data-link-type="dfn" href="#public-key-credential-source" id="ref-for-public-key-credential-source④④">public key credential source</a>.</p>
-   <p>Since this specification requires an <a data-link-type="dfn" href="#authorization-gesture" id="ref-for-authorization-gesture①④">authorization gesture</a> to create any <a data-link-type="dfn" href="#assertion" id="ref-for-assertion②">assertions</a>, the <code>PublicKeyCredential.<dfn class="dfn-paneled idl-code" data-dfn-for="PublicKeyCredential" data-dfn-type="method" data-export id="dom-publickeycredential-collectfromcredentialstore-slot"><code>[[CollectFromCredentialStore]](origin, options, sameOriginWithAncestors)</code></dfn></code> <a data-link-type="dfn" href="https://tc39.github.io/ecma262/#sec-object-internal-methods-and-internal-slots" id="ref-for-sec-object-internal-methods-and-internal-slots①①">internal method</a> inherits the default behavior of <code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#collectfromcredentialstore-origin-options-sameoriginwithancestors" id="ref-for-collectfromcredentialstore-origin-options-sameoriginwithancestors①">Credential.[[CollectFromCredentialStore]]()</a></code>, of returning an empty set.</p>
+   <p>Since this specification requires an <a data-link-type="dfn" href="#authorization-gesture" id="ref-for-authorization-gesture①④">authorization gesture</a> to create any <a data-link-type="dfn" href="#assertion" id="ref-for-assertion②">assertions</a>, the <code>PublicKeyCredential.<dfn class="dfn-paneled idl-code" data-dfn-for="PublicKeyCredential" data-dfn-type="method" data-export id="dom-publickeycredential-collectfromcredentialstore-slot"><code>[[CollectFromCredentialStore]](origin, options, sameOriginWithAncestors)</code></dfn></code> <a data-link-type="dfn" href="https://tc39.github.io/ecma262/#sec-object-internal-methods-and-internal-slots" id="ref-for-sec-object-internal-methods-and-internal-slots①①">internal method</a> inherits the default behavior of <code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#dom-credential-collectfromcredentialstore-slot" id="ref-for-dom-credential-collectfromcredentialstore-slot①">Credential.[[CollectFromCredentialStore]]()</a></code>, of returning an empty set.</p>
    <p>In general, the user agent SHOULD show some UI to the user to guide them in selecting and authorizing an authenticator with which
 to complete the operation. By setting <code><var>options</var>.<code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#dom-credentialrequestoptions-mediation" id="ref-for-dom-credentialrequestoptions-mediation①">mediation</a></code></code> to <code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#dom-credentialmediationrequirement-conditional" id="ref-for-dom-credentialmediationrequirement-conditional④">conditional</a></code>, <a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party①⓪①">Relying Parties</a> can indicate that a prominent modal UI should <i>not</i> be shown <i>unless</i> credentials are discovered. <a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party①⓪②">Relying Party</a> script SHOULD first check that <code class="idl"><a data-link-type="idl" href="#dom-publickeycredential-isconditionalmediationavailable" id="ref-for-dom-publickeycredential-isconditionalmediationavailable①">isConditionalMediationAvailable()</a></code> returns <code>true</code> in order to avoid
 the possibility of causing a user-visible error to be returned if the user agent does not support <code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#dom-credentialmediationrequirement-conditional" id="ref-for-dom-credentialmediationrequirement-conditional⑤">conditional</a></code> <a data-link-type="dfn" href="https://w3c.github.io/webappsec-credential-management/#user-mediated" id="ref-for-user-mediated③">user mediation</a>.</p>
@@ -3443,10 +3443,11 @@ <h5 class="heading settled" data-level="5.1.4.2" id="sctn-issuing-cred-request-t
    </ol>
    <h4 class="heading settled" data-level="5.1.5" id="sctn-storeCredential"><span class="secno">5.1.5. </span><span class="content">Store an Existing Credential - PublicKeyCredential’s <code>[[Store]](credential, sameOriginWithAncestors)</code> Method</span><a class="self-link" href="#sctn-storeCredential"></a></h4>
    <div data-link-for-hint="PublicKeyCredential/[[Store]](credential, sameOriginWithAncestors)">
-    <p>The <dfn class="idl-code" data-dfn-for="PublicKeyCredential" data-dfn-type="method" data-export id="dom-publickeycredential-store-slot"><code>[[Store]](credential, sameOriginWithAncestors)</code><a class="self-link" href="#dom-publickeycredential-store-slot"></a></dfn> method is not supported
-for Web Authentication’s <code class="idl"><a data-link-type="idl" href="#publickeycredential" id="ref-for-publickeycredential①④">PublicKeyCredential</a></code> type, so it always throws an error.</p>
+    <p>The <code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#dom-credential-store-slot" id="ref-for-dom-credential-store-slot">[[Store]](credential, sameOriginWithAncestors)</a></code> method is not supported
+for Web Authentication’s <code class="idl"><a data-link-type="idl" href="#publickeycredential" id="ref-for-publickeycredential①④">PublicKeyCredential</a></code> type,
+so its implementation of the <dfn class="dfn-paneled idl-code" data-dfn-for="PublicKeyCredential" data-dfn-type="method" data-export id="dom-publickeycredential-store-slot"><code>[[Store]](credential, sameOriginWithAncestors)</code></dfn> <a data-link-type="dfn" href="https://tc39.github.io/ecma262/#sec-object-internal-methods-and-internal-slots" id="ref-for-sec-object-internal-methods-and-internal-slots①⑥">internal method</a> always throws an error.</p>
     <p class="note" role="note"><span class="marker">Note:</span> This algorithm is synchronous; the <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-promise" id="ref-for-idl-promise④">Promise</a></code> resolution/rejection is handled by <code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#dom-credentialscontainer-store" id="ref-for-dom-credentialscontainer-store">navigator.credentials.store()</a></code>.</p>
-    <p>This <a data-link-type="dfn" href="https://tc39.github.io/ecma262/#sec-object-internal-methods-and-internal-slots" id="ref-for-sec-object-internal-methods-and-internal-slots①⑥">internal method</a> accepts two arguments:</p>
+    <p>This <a data-link-type="dfn" href="https://tc39.github.io/ecma262/#sec-object-internal-methods-and-internal-slots" id="ref-for-sec-object-internal-methods-and-internal-slots①⑦">internal method</a> accepts two arguments:</p>
     <dl>
      <dt data-md><dfn class="idl-code" data-dfn-for="PublicKeyCredential/[[Store]](credential, sameOriginWithAncestors)" data-dfn-type="argument" data-export id="dom-publickeycredential-store-credential-sameoriginwithancestors-credential"><code>credential</code><a class="self-link" href="#dom-publickeycredential-store-credential-sameoriginwithancestors-credential"></a></dfn>
      <dd data-md>
@@ -3466,7 +3467,7 @@ <h4 class="heading settled" data-level="5.1.6" id="sctn-preventSilentAccessCrede
     <p>Calling the <dfn class="idl-code" data-dfn-for="PublicKeyCredential" data-dfn-type="method" data-export id="dom-publickeycredential-preventsilentaccess-slot"><code>[[preventSilentAccess]](credential, sameOriginWithAncestors)</code><a class="self-link" href="#dom-publickeycredential-preventsilentaccess-slot"></a></dfn> method
 will have no effect on authenticators that require an <a data-link-type="dfn" href="#authorization-gesture" id="ref-for-authorization-gesture①⑤">authorization gesture</a>,
 but setting that flag may potentially exclude authenticators that can operate without user intervention.</p>
-    <p>This <a data-link-type="dfn" href="https://tc39.github.io/ecma262/#sec-object-internal-methods-and-internal-slots" id="ref-for-sec-object-internal-methods-and-internal-slots①⑦">internal method</a> accepts no arguments.</p>
+    <p>This <a data-link-type="dfn" href="https://tc39.github.io/ecma262/#sec-object-internal-methods-and-internal-slots" id="ref-for-sec-object-internal-methods-and-internal-slots①⑧">internal method</a> accepts no arguments.</p>
    </div>
    <h4 class="heading settled" data-level="5.1.7" id="sctn-isUserVerifyingPlatformAuthenticatorAvailable"><span class="secno">5.1.7. </span><span class="content">Availability of <a data-link-type="dfn" href="#user-verifying-platform-authenticator" id="ref-for-user-verifying-platform-authenticator②">User-Verifying Platform Authenticator</a> - PublicKeyCredential’s <code>isUserVerifyingPlatformAuthenticatorAvailable()</code> Method</span><a class="self-link" href="#sctn-isUserVerifyingPlatformAuthenticatorAvailable"></a></h4>
    <div data-link-for-hint="WebAuthentication/isUserVerifyingPlatformAuthenticatorAvailable">
@@ -3629,7 +3630,7 @@ <h4 class="heading settled" data-level="5.2.1" id="iface-authenticatorattestatio
       <p>This operation returns the <code class="idl"><a data-link-type="idl" href="#typedefdef-cosealgorithmidentifier" id="ref-for-typedefdef-cosealgorithmidentifier③">COSEAlgorithmIdentifier</a></code> of the new credential. See <a href="#sctn-public-key-easy">§ 5.2.1.1 Easily accessing credential data</a>.</p>
      <dt data-md><dfn class="dfn-paneled idl-code" data-dfn-for="AuthenticatorAttestationResponse" data-dfn-type="attribute" data-export id="dom-authenticatorattestationresponse-transports-slot"><code>[[transports]]</code></dfn>
      <dd data-md>
-      <p>This <a data-link-type="dfn" href="https://tc39.github.io/ecma262/#sec-object-internal-methods-and-internal-slots" id="ref-for-sec-object-internal-methods-and-internal-slots①⑧">internal slot</a> contains a sequence of zero or more unique <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-DOMString" id="ref-for-idl-DOMString②⑦">DOMString</a></code>s in lexicographical order. These values are the transports that the <a data-link-type="dfn" href="#authenticator" id="ref-for-authenticator⑨⑤">authenticator</a> is believed to support, or an empty sequence if the information is unavailable. The values SHOULD be members of <code class="idl"><a data-link-type="idl" href="#enumdef-authenticatortransport" id="ref-for-enumdef-authenticatortransport①">AuthenticatorTransport</a></code> but <a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party①⓪⑨">Relying Parties</a> SHOULD accept and store unknown values.</p>
+      <p>This <a data-link-type="dfn" href="https://tc39.github.io/ecma262/#sec-object-internal-methods-and-internal-slots" id="ref-for-sec-object-internal-methods-and-internal-slots①⑨">internal slot</a> contains a sequence of zero or more unique <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-DOMString" id="ref-for-idl-DOMString②⑦">DOMString</a></code>s in lexicographical order. These values are the transports that the <a data-link-type="dfn" href="#authenticator" id="ref-for-authenticator⑨⑤">authenticator</a> is believed to support, or an empty sequence if the information is unavailable. The values SHOULD be members of <code class="idl"><a data-link-type="idl" href="#enumdef-authenticatortransport" id="ref-for-enumdef-authenticatortransport①">AuthenticatorTransport</a></code> but <a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party①⓪⑨">Relying Parties</a> SHOULD accept and store unknown values.</p>
     </dl>
    </div>
    <h5 class="heading settled" data-level="5.2.1.1" id="sctn-public-key-easy"><span class="secno">5.2.1.1. </span><span class="content">Easily accessing credential data</span><a class="self-link" href="#sctn-public-key-easy"></a></h5>
@@ -4113,7 +4114,7 @@ <h3 class="heading settled" data-level="5.6" id="sctn-abortoperation"><span clas
 See <a href="https://dom.spec.whatwg.org/#abortcontroller-api-integration"><cite>DOM</cite> § 3.3 Using AbortController and AbortSignal objects in APIs</a> section for detailed instructions.</p>
    <p class="note" role="note"><span class="marker">Note:</span> <a href="https://dom.spec.whatwg.org/#abortcontroller-api-integration"><cite>DOM</cite> § 3.3 Using AbortController and AbortSignal objects in APIs</a> section specifies that web platform APIs integrating with the <code class="idl"><a data-link-type="idl" href="https://dom.spec.whatwg.org/#abortcontroller" id="ref-for-abortcontroller③">AbortController</a></code> must reject the promise immediately once the <code class="idl"><a data-link-type="idl" href="https://dom.spec.whatwg.org/#abortsignal" id="ref-for-abortsignal">AbortSignal</a></code> is <a data-link-type="dfn" href="https://dom.spec.whatwg.org/#abortsignal-aborted" id="ref-for-abortsignal-aborted④">aborted</a>.
     Given the complex inheritance and parallelization structure of the <code class="idl"><a data-link-type="idl" href="#dom-publickeycredential-create-slot" id="ref-for-dom-publickeycredential-create-slot⑤">[[Create]](origin, options, sameOriginWithAncestors)</a></code> and <code class="idl"><a data-link-type="idl" href="#dom-publickeycredential-discoverfromexternalsource-slot" id="ref-for-dom-publickeycredential-discoverfromexternalsource-slot⑦">[[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors)</a></code> methods, the algorithms for the two APIs fulfills this
-    requirement by checking the <a data-link-type="dfn" href="https://dom.spec.whatwg.org/#abortsignal-aborted" id="ref-for-abortsignal-aborted⑤">aborted</a> property in three places. In the case of <code class="idl"><a data-link-type="idl" href="#dom-publickeycredential-create-slot" id="ref-for-dom-publickeycredential-create-slot⑥">[[Create]](origin, options, sameOriginWithAncestors)</a></code>, the <a data-link-type="dfn" href="https://dom.spec.whatwg.org/#abortsignal-aborted" id="ref-for-abortsignal-aborted⑥">aborted</a> property is checked first in <a href="https://w3c.github.io/webappsec-credential-management/#algorithm-create"><cite>Credential Management 1</cite> § 2.5.4 Create a Credential</a> immediately before calling <code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#create-origin-options-sameoriginwithancestors" id="ref-for-create-origin-options-sameoriginwithancestors">[[Create]](origin, options, sameOriginWithAncestors)</a></code>,
+    requirement by checking the <a data-link-type="dfn" href="https://dom.spec.whatwg.org/#abortsignal-aborted" id="ref-for-abortsignal-aborted⑤">aborted</a> property in three places. In the case of <code class="idl"><a data-link-type="idl" href="#dom-publickeycredential-create-slot" id="ref-for-dom-publickeycredential-create-slot⑥">[[Create]](origin, options, sameOriginWithAncestors)</a></code>, the <a data-link-type="dfn" href="https://dom.spec.whatwg.org/#abortsignal-aborted" id="ref-for-abortsignal-aborted⑥">aborted</a> property is checked first in <a href="https://w3c.github.io/webappsec-credential-management/#algorithm-create"><cite>Credential Management 1</cite> § 2.5.4 Create a Credential</a> immediately before calling <code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#dom-credential-create-slot" id="ref-for-dom-credential-create-slot">[[Create]](origin, options, sameOriginWithAncestors)</a></code>,
     then in <a href="#sctn-createCredential">§ 5.1.3 Create a New Credential - PublicKeyCredential’s [[Create]](origin, options, sameOriginWithAncestors) Method</a> right before <a data-link-type="dfn" href="#authenticator-session" id="ref-for-authenticator-session">authenticator sessions</a> start, and finally
     during <a data-link-type="dfn" href="#authenticator-session" id="ref-for-authenticator-session①">authenticator sessions</a>. The same goes for <code class="idl"><a data-link-type="idl" href="#dom-publickeycredential-discoverfromexternalsource-slot" id="ref-for-dom-publickeycredential-discoverfromexternalsource-slot⑧">[[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors)</a></code>.</p>
    <p>The <a data-link-type="dfn" href="https://www.w3.org/TR/page-visibility/#visibility-states" id="ref-for-visibility-states">visibility</a> and <a data-link-type="dfn" href="https://html.spec.whatwg.org/#focus" id="ref-for-focus">focus</a> state of the <code class="idl"><a data-link-type="idl" href="https://html.spec.whatwg.org/multipage/nav-history-apis.html#window" id="ref-for-window">Window</a></code> object determines whether the <code class="idl"><a data-link-type="idl" href="#dom-publickeycredential-create-slot" id="ref-for-dom-publickeycredential-create-slot⑦">[[Create]](origin, options, sameOriginWithAncestors)</a></code> and <code class="idl"><a data-link-type="idl" href="#dom-publickeycredential-discoverfromexternalsource-slot" id="ref-for-dom-publickeycredential-discoverfromexternalsource-slot⑨">[[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors)</a></code> operations
@@ -4198,7 +4199,7 @@ <h4 class="heading settled" data-level="5.8.1" id="dictionary-client-data"><span
      <dt data-md><dfn class="dfn-paneled idl-code" data-dfn-for="CollectedClientData" data-dfn-type="dict-member" data-export id="dom-collectedclientdata-crossorigin"><code>crossOrigin</code></dfn>, <span> of type <a data-link-type="idl-name" href="https://webidl.spec.whatwg.org/#idl-boolean" id="ref-for-idl-boolean⑥">boolean</a></span>
      <dd data-md>
       <p>This OPTIONAL member contains the inverse of the <code>sameOriginWithAncestors</code> argument value
-that was passed into the <a data-link-type="dfn" href="https://tc39.github.io/ecma262/#sec-object-internal-methods-and-internal-slots" id="ref-for-sec-object-internal-methods-and-internal-slots①⑨">internal method</a>.</p>
+that was passed into the <a data-link-type="dfn" href="https://tc39.github.io/ecma262/#sec-object-internal-methods-and-internal-slots" id="ref-for-sec-object-internal-methods-and-internal-slots②⓪">internal method</a>.</p>
      <dt data-md>[RESERVED] <dfn data-dfn-for="CollectedClientData" data-dfn-type="dfn" data-noexport id="collectedclientdata-tokenbinding">tokenBinding<a class="self-link" href="#collectedclientdata-tokenbinding"></a></dfn>
      <dd data-md>
       <p>This OPTIONAL member contains information about the state of the <a data-link-type="dfn" href="https://tools.ietf.org/html/rfc8471#section-1" id="ref-for-section-1">Token Binding</a> protocol <a data-link-type="biblio" href="#biblio-tokenbinding" title="The Token Binding Protocol Version 1.0">[TokenBinding]</a> used when communicating
@@ -4561,7 +4562,7 @@ <h3 class="heading settled" data-level="5.9" id="sctn-permissions-policy"><span
 and "<code><dfn class="dfn-paneled" data-dfn-type="dfn" data-export data-lt="publickey-credentials-get-feature" id="publickey-credentials-get-feature">publickey-credentials-get</dfn></code>".
 Their <a data-link-type="dfn" href="https://w3c.github.io/webappsec-permissions-policy/#policy-controlled-feature-default-allowlist" id="ref-for-policy-controlled-feature-default-allowlist">default allowlists</a> are both '<code>self</code>'. <a data-link-type="biblio" href="#biblio-permissions-policy" title="Permissions Policy">[Permissions-Policy]</a></p>
    <p>A <code class="idl"><a data-link-type="idl" href="https://dom.spec.whatwg.org/#document" id="ref-for-document">Document</a></code>'s <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/dom.html#concept-document-permissions-policy" id="ref-for-concept-document-permissions-policy④">permissions policy</a> determines whether any content in that <a href="https://html.spec.whatwg.org/multipage/dom.html#documents">document</a> is <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/iframe-embed-object.html#allowed-to-use" id="ref-for-allowed-to-use②">allowed to successfully invoke</a> the <a data-link-type="dfn" href="#web-authentication-api" id="ref-for-web-authentication-api①③">Web Authentication API</a>, i.e., via <code><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#dom-credentialscontainer-create" id="ref-for-dom-credentialscontainer-create②③">navigator.credentials.create({publicKey:..., ...})</a></code> or <code><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#dom-credentialscontainer-get" id="ref-for-dom-credentialscontainer-get②⑥">navigator.credentials.get({publicKey:..., ...})</a></code> If disabled in any document, no content in the document will be <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/iframe-embed-object.html#allowed-to-use" id="ref-for-allowed-to-use③">allowed to use</a> the foregoing methods: attempting to do so will <a href="https://www.w3.org/2001/tag/doc/promises-guide#errors">return an error</a>.</p>
-   <p class="note" role="note"><span class="marker">Note:</span> Algorithms specified in <a data-link-type="biblio" href="#biblio-credential-management-1" title="Credential Management Level 1">[CREDENTIAL-MANAGEMENT-1]</a> perform the actual permissions policy evaluation. This is because such policy evaluation needs to occur when there is access to the <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#current-settings-object" id="ref-for-current-settings-object">current settings object</a>. The <code class="idl"><a data-link-type="idl" href="#dom-publickeycredential-create-slot" id="ref-for-dom-publickeycredential-create-slot⑨">[[Create]](origin, options, sameOriginWithAncestors)</a></code> and <code class="idl"><a data-link-type="idl" href="#dom-publickeycredential-discoverfromexternalsource-slot" id="ref-for-dom-publickeycredential-discoverfromexternalsource-slot①①">[[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors)</a></code> <a data-link-type="dfn" href="https://tc39.github.io/ecma262/#sec-object-internal-methods-and-internal-slots" id="ref-for-sec-object-internal-methods-and-internal-slots②⓪">internal methods</a> does not have such access since they are invoked <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/infrastructure.html#in-parallel" id="ref-for-in-parallel">in parallel</a> by <code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#credentialscontainer" id="ref-for-credentialscontainer③">CredentialsContainer</a></code>'s <a data-link-type="abstract-op" href="https://w3c.github.io/webappsec-credential-management/#abstract-opdef-create-a-credential" id="ref-for-abstract-opdef-create-a-credential">Create a <code>Credential</code></a> and <a data-link-type="abstract-op" href="https://w3c.github.io/webappsec-credential-management/#abstract-opdef-request-a-credential" id="ref-for-abstract-opdef-request-a-credential①">Request a <code>Credential</code></a> abstract operations <a data-link-type="biblio" href="#biblio-credential-management-1" title="Credential Management Level 1">[CREDENTIAL-MANAGEMENT-1]</a>.</p>
+   <p class="note" role="note"><span class="marker">Note:</span> Algorithms specified in <a data-link-type="biblio" href="#biblio-credential-management-1" title="Credential Management Level 1">[CREDENTIAL-MANAGEMENT-1]</a> perform the actual permissions policy evaluation. This is because such policy evaluation needs to occur when there is access to the <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#current-settings-object" id="ref-for-current-settings-object">current settings object</a>. The <code class="idl"><a data-link-type="idl" href="#dom-publickeycredential-create-slot" id="ref-for-dom-publickeycredential-create-slot⑨">[[Create]](origin, options, sameOriginWithAncestors)</a></code> and <code class="idl"><a data-link-type="idl" href="#dom-publickeycredential-discoverfromexternalsource-slot" id="ref-for-dom-publickeycredential-discoverfromexternalsource-slot①①">[[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors)</a></code> <a data-link-type="dfn" href="https://tc39.github.io/ecma262/#sec-object-internal-methods-and-internal-slots" id="ref-for-sec-object-internal-methods-and-internal-slots②①">internal methods</a> does not have such access since they are invoked <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/infrastructure.html#in-parallel" id="ref-for-in-parallel">in parallel</a> by <code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#credentialscontainer" id="ref-for-credentialscontainer③">CredentialsContainer</a></code>'s <a data-link-type="abstract-op" href="https://w3c.github.io/webappsec-credential-management/#abstract-opdef-create-a-credential" id="ref-for-abstract-opdef-create-a-credential">Create a <code>Credential</code></a> and <a data-link-type="abstract-op" href="https://w3c.github.io/webappsec-credential-management/#abstract-opdef-request-a-credential" id="ref-for-abstract-opdef-request-a-credential①">Request a <code>Credential</code></a> abstract operations <a data-link-type="biblio" href="#biblio-credential-management-1" title="Credential Management Level 1">[CREDENTIAL-MANAGEMENT-1]</a>.</p>
    <h3 class="heading settled" data-level="5.10" id="sctn-iframe-guidance"><span class="secno">5.10. </span><span class="content">Using Web Authentication within <code>iframe</code> elements</span><a class="self-link" href="#sctn-iframe-guidance"></a></h3>
    <p>The <a data-link-type="dfn" href="#web-authentication-api" id="ref-for-web-authentication-api①④">Web Authentication API</a> is disabled by default in cross-origin <code><a data-link-type="element" href="https://html.spec.whatwg.org/multipage/iframe-embed-object.html#the-iframe-element" id="ref-for-the-iframe-element①">iframe</a></code>s.
 To override this default policy and indicate that a cross-origin <code><a data-link-type="element" href="https://html.spec.whatwg.org/multipage/iframe-embed-object.html#the-iframe-element" id="ref-for-the-iframe-element②">iframe</a></code> is allowed to invoke the <a data-link-type="dfn" href="#web-authentication-api" id="ref-for-web-authentication-api①⑤">Web Authentication API</a>'s <code class="idl"><a data-link-type="idl" href="#dom-publickeycredential-discoverfromexternalsource-slot" id="ref-for-dom-publickeycredential-discoverfromexternalsource-slot①②">[[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors)</a></code> method, specify the <code><a data-link-type="element-sub" href="https://html.spec.whatwg.org/multipage/iframe-embed-object.html#attr-iframe-allow" id="ref-for-attr-iframe-allow">allow</a></code> attribute on the <code><a data-link-type="element" href="https://html.spec.whatwg.org/multipage/iframe-embed-object.html#the-iframe-element" id="ref-for-the-iframe-element③">iframe</a></code> element and include the <code><a data-link-type="dfn" href="#publickey-credentials-get-feature" id="ref-for-publickey-credentials-get-feature">publickey-credentials-get</a></code> feature-identifier token in the <code><a data-link-type="element-sub" href="https://html.spec.whatwg.org/multipage/iframe-embed-object.html#attr-iframe-allow" id="ref-for-attr-iframe-allow①">allow</a></code> attribute’s value.</p>
@@ -9541,9 +9542,9 @@ <h3 class="no-num no-ref heading settled" id="index-defined-elsewhere"><span cla
      <li><span class="dfn-paneled" id="d9070155">CredentialRequestOptions</span>
      <li><span class="dfn-paneled" id="59825b02">CredentialsContainer</span>
      <li><span class="dfn-paneled" id="696a29e8">Request a Credential</span>
-     <li><span class="dfn-paneled" id="30386aea">[[CollectFromCredentialStore]](origin, options, sameOriginWithAncestors)</span>
-     <li><span class="dfn-paneled" id="7254de80">[[Create]](origin, options, sameOriginWithAncestors)</span>
-     <li><span class="dfn-paneled" id="571e7a91">[[Store]](credential, sameOriginWithAncestors)</span>
+     <li><span class="dfn-paneled" id="d18b257e">[[CollectFromCredentialStore]](origin, options, sameOriginWithAncestors)</span>
+     <li><span class="dfn-paneled" id="9cec8893">[[Create]](origin, options, sameOriginWithAncestors)</span>
+     <li><span class="dfn-paneled" id="267f1f5f">[[Store]](credential, sameOriginWithAncestors)</span>
      <li><span class="dfn-paneled" id="ad09952f">[[discovery]]</span>
      <li><span class="dfn-paneled" id="f41069dd">[[type]]</span>
      <li><span class="dfn-paneled" id="f9c635f5">conditional</span>
@@ -10940,9 +10941,9 @@ <h2 class="no-num no-ref heading settled" id="issues-index"><span class="content
 window.dfnpanelData['d9070155'] = {"dfnID": "d9070155", "url": "https://w3c.github.io/webappsec-credential-management/#dictdef-credentialrequestoptions", "dfnText": "CredentialRequestOptions", "refSections": [{"refs": [{"id": "ref-for-dictdef-credentialrequestoptions"}, {"id": "ref-for-dictdef-credentialrequestoptions\u2460"}], "title": "5.1.2. CredentialRequestOptions Dictionary Extension"}, {"refs": [{"id": "ref-for-dictdef-credentialrequestoptions\u2461"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}], "external": true};
 window.dfnpanelData['59825b02'] = {"dfnID": "59825b02", "url": "https://w3c.github.io/webappsec-credential-management/#credentialscontainer", "dfnText": "CredentialsContainer", "refSections": [{"refs": [{"id": "ref-for-credentialscontainer"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-credentialscontainer\u2460"}], "title": "5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"}, {"refs": [{"id": "ref-for-credentialscontainer\u2461"}], "title": "5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"}, {"refs": [{"id": "ref-for-credentialscontainer\u2462"}], "title": "5.9. Permissions Policy integration"}], "external": true};
 window.dfnpanelData['696a29e8'] = {"dfnID": "696a29e8", "url": "https://w3c.github.io/webappsec-credential-management/#abstract-opdef-request-a-credential", "dfnText": "Request a Credential", "refSections": [{"refs": [{"id": "ref-for-abstract-opdef-request-a-credential"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-abstract-opdef-request-a-credential\u2460"}], "title": "5.9. Permissions Policy integration"}], "external": true};
-window.dfnpanelData['30386aea'] = {"dfnID": "30386aea", "url": "https://w3c.github.io/webappsec-credential-management/#collectfromcredentialstore-origin-options-sameoriginwithancestors", "dfnText": "[[CollectFromCredentialStore]](origin, options, sameOriginWithAncestors)", "refSections": [{"refs": [{"id": "ref-for-collectfromcredentialstore-origin-options-sameoriginwithancestors"}], "title": "5.1. PublicKeyCredential Interface"}, {"refs": [{"id": "ref-for-collectfromcredentialstore-origin-options-sameoriginwithancestors\u2460"}], "title": "5.1.4. Use an Existing Credential to Make an Assertion - PublicKeyCredential\u2019s [[Get]](options) Method"}], "external": true};
-window.dfnpanelData['7254de80'] = {"dfnID": "7254de80", "url": "https://w3c.github.io/webappsec-credential-management/#create-origin-options-sameoriginwithancestors", "dfnText": "[[Create]](origin, options, sameOriginWithAncestors)", "refSections": [{"refs": [{"id": "ref-for-create-origin-options-sameoriginwithancestors"}], "title": "5.6. Abort Operations with AbortSignal"}], "external": true};
-window.dfnpanelData['571e7a91'] = {"dfnID": "571e7a91", "url": "https://w3c.github.io/webappsec-credential-management/#store-credential-sameoriginwithancestors", "dfnText": "[[Store]](credential, sameOriginWithAncestors)", "refSections": [{"refs": [{"id": "ref-for-store-credential-sameoriginwithancestors"}], "title": "5.1. PublicKeyCredential Interface"}], "external": true};
+window.dfnpanelData['d18b257e'] = {"dfnID": "d18b257e", "url": "https://w3c.github.io/webappsec-credential-management/#dom-credential-collectfromcredentialstore-slot", "dfnText": "[[CollectFromCredentialStore]](origin, options, sameOriginWithAncestors)", "refSections": [{"refs": [{"id": "ref-for-dom-credential-collectfromcredentialstore-slot"}], "title": "5.1. PublicKeyCredential Interface"}, {"refs": [{"id": "ref-for-dom-credential-collectfromcredentialstore-slot\u2460"}], "title": "5.1.4. Use an Existing Credential to Make an Assertion - PublicKeyCredential\u2019s [[Get]](options) Method"}], "external": true};
+window.dfnpanelData['9cec8893'] = {"dfnID": "9cec8893", "url": "https://w3c.github.io/webappsec-credential-management/#dom-credential-create-slot", "dfnText": "[[Create]](origin, options, sameOriginWithAncestors)", "refSections": [{"refs": [{"id": "ref-for-dom-credential-create-slot"}], "title": "5.6. Abort Operations with AbortSignal"}], "external": true};
+window.dfnpanelData['267f1f5f'] = {"dfnID": "267f1f5f", "url": "https://w3c.github.io/webappsec-credential-management/#dom-credential-store-slot", "dfnText": "[[Store]](credential, sameOriginWithAncestors)", "refSections": [{"refs": [{"id": "ref-for-dom-credential-store-slot"}], "title": "5.1.5. Store an Existing Credential - PublicKeyCredential\u2019s [[Store]](credential, sameOriginWithAncestors) Method"}], "external": true};
 window.dfnpanelData['ad09952f'] = {"dfnID": "ad09952f", "url": "https://w3c.github.io/webappsec-credential-management/#dom-credential-discovery-slot", "dfnText": "[[discovery]]", "refSections": [{"refs": [{"id": "ref-for-dom-credential-discovery-slot"}], "title": "5.1. PublicKeyCredential Interface"}], "external": true};
 window.dfnpanelData['f41069dd'] = {"dfnID": "f41069dd", "url": "https://w3c.github.io/webappsec-credential-management/#dom-credential-type-slot", "dfnText": "[[type]]", "refSections": [{"refs": [{"id": "ref-for-dom-credential-type-slot"}], "title": "5.1. PublicKeyCredential Interface"}], "external": true};
 window.dfnpanelData['f9c635f5'] = {"dfnID": "f9c635f5", "url": "https://w3c.github.io/webappsec-credential-management/#dom-credentialmediationrequirement-conditional", "dfnText": "conditional", "refSections": [{"refs": [{"id": "ref-for-dom-credentialmediationrequirement-conditional"}, {"id": "ref-for-dom-credentialmediationrequirement-conditional\u2460"}, {"id": "ref-for-dom-credentialmediationrequirement-conditional\u2461"}, {"id": "ref-for-dom-credentialmediationrequirement-conditional\u2462"}], "title": "5.1. PublicKeyCredential Interface"}, {"refs": [{"id": "ref-for-dom-credentialmediationrequirement-conditional\u2463"}, {"id": "ref-for-dom-credentialmediationrequirement-conditional\u2464"}], "title": "5.1.4. Use an Existing Credential to Make an Assertion - PublicKeyCredential\u2019s [[Get]](options) Method"}, {"refs": [{"id": "ref-for-dom-credentialmediationrequirement-conditional\u2465"}, {"id": "ref-for-dom-credentialmediationrequirement-conditional\u2466"}, {"id": "ref-for-dom-credentialmediationrequirement-conditional\u2467"}, {"id": "ref-for-dom-credentialmediationrequirement-conditional\u2468"}, {"id": "ref-for-dom-credentialmediationrequirement-conditional\u2460\u24ea"}, {"id": "ref-for-dom-credentialmediationrequirement-conditional\u2460\u2460"}, {"id": "ref-for-dom-credentialmediationrequirement-conditional\u2460\u2461"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-dom-credentialmediationrequirement-conditional\u2460\u2462"}], "title": "5.1.4.2. Issuing a Credential Request to an Authenticator"}, {"refs": [{"id": "ref-for-dom-credentialmediationrequirement-conditional\u2460\u2463"}], "title": "6.3.5. The silentCredentialDiscovery operation"}], "external": true};
@@ -10966,8 +10967,8 @@ <h2 class="no-num no-ref heading settled" id="issues-index"><span class="content
 window.dfnpanelData['535dd335'] = {"dfnID": "535dd335", "url": "https://dom.spec.whatwg.org/#abortsignal-aborted", "dfnText": "aborted", "refSections": [{"refs": [{"id": "ref-for-abortsignal-aborted"}, {"id": "ref-for-abortsignal-aborted\u2460"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-abortsignal-aborted\u2461"}, {"id": "ref-for-abortsignal-aborted\u2462"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-abortsignal-aborted\u2463"}, {"id": "ref-for-abortsignal-aborted\u2464"}, {"id": "ref-for-abortsignal-aborted\u2465"}], "title": "5.6. Abort Operations with AbortSignal"}], "external": true};
 window.dfnpanelData['a973e0fe'] = {"dfnID": "a973e0fe", "url": "https://dom.spec.whatwg.org/#concept-document", "dfnText": "document", "refSections": [{"refs": [{"id": "ref-for-concept-document"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-concept-document\u2460"}], "title": "5.6. Abort Operations with AbortSignal"}], "external": true};
 window.dfnpanelData['0204d130'] = {"dfnID": "0204d130", "url": "https://tc39.github.io/ecma262/#sec-arraybuffer-constructor", "dfnText": "%arraybuffer%", "refSections": [{"refs": [{"id": "ref-for-sec-arraybuffer-constructor"}], "title": "3. Dependencies"}, {"refs": [{"id": "ref-for-sec-arraybuffer-constructor\u2460"}, {"id": "ref-for-sec-arraybuffer-constructor\u2461"}, {"id": "ref-for-sec-arraybuffer-constructor\u2462"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-sec-arraybuffer-constructor\u2463"}, {"id": "ref-for-sec-arraybuffer-constructor\u2464"}, {"id": "ref-for-sec-arraybuffer-constructor\u2465"}, {"id": "ref-for-sec-arraybuffer-constructor\u2466"}, {"id": "ref-for-sec-arraybuffer-constructor\u2467"}, {"id": "ref-for-sec-arraybuffer-constructor\u2468"}, {"id": "ref-for-sec-arraybuffer-constructor\u2460\u24ea"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}], "external": true};
-window.dfnpanelData['8841d736'] = {"dfnID": "8841d736", "url": "https://tc39.github.io/ecma262/#sec-object-internal-methods-and-internal-slots", "dfnText": "internal method", "refSections": [{"refs": [{"id": "ref-for-sec-object-internal-methods-and-internal-slots"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2460"}, {"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2461"}, {"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2462"}, {"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2463"}, {"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2464"}], "title": "5.1. PublicKeyCredential Interface"}, {"refs": [{"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2465"}, {"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2466"}, {"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2467"}, {"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2468"}, {"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2460\u24ea"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2460\u2460"}], "title": "5.1.4. Use an Existing Credential to Make an Assertion - PublicKeyCredential\u2019s [[Get]](options) Method"}, {"refs": [{"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2460\u2461"}, {"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2460\u2462"}, {"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2460\u2463"}, {"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2460\u2464"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2460\u2465"}], "title": "5.1.5. Store an Existing Credential - PublicKeyCredential\u2019s [[Store]](credential, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2460\u2466"}], "title": "5.1.6. Preventing Silent Access to an Existing Credential - PublicKeyCredential\u2019s [[preventSilentAccess]](credential, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2460\u2467"}], "title": "5.2.1. Information About Public Key Credential (interface AuthenticatorAttestationResponse)"}, {"refs": [{"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2460\u2468"}], "title": "5.8.1. Client Data Used in WebAuthn Signatures (dictionary CollectedClientData)"}, {"refs": [{"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2461\u24ea"}], "title": "5.9. Permissions Policy integration"}], "external": true};
-window.dfnpanelData['c15f1628'] = {"dfnID": "c15f1628", "url": "https://tc39.github.io/ecma262/#sec-object-internal-methods-and-internal-slots", "dfnText": "internal slot", "refSections": [{"refs": [{"id": "ref-for-sec-object-internal-methods-and-internal-slots"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2460"}, {"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2461"}, {"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2462"}, {"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2463"}, {"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2464"}], "title": "5.1. PublicKeyCredential Interface"}, {"refs": [{"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2465"}, {"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2466"}, {"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2467"}, {"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2468"}, {"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2460\u24ea"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2460\u2460"}], "title": "5.1.4. Use an Existing Credential to Make an Assertion - PublicKeyCredential\u2019s [[Get]](options) Method"}, {"refs": [{"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2460\u2461"}, {"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2460\u2462"}, {"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2460\u2463"}, {"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2460\u2464"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2460\u2465"}], "title": "5.1.5. Store an Existing Credential - PublicKeyCredential\u2019s [[Store]](credential, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2460\u2466"}], "title": "5.1.6. Preventing Silent Access to an Existing Credential - PublicKeyCredential\u2019s [[preventSilentAccess]](credential, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2460\u2467"}], "title": "5.2.1. Information About Public Key Credential (interface AuthenticatorAttestationResponse)"}, {"refs": [{"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2460\u2468"}], "title": "5.8.1. Client Data Used in WebAuthn Signatures (dictionary CollectedClientData)"}, {"refs": [{"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2461\u24ea"}], "title": "5.9. Permissions Policy integration"}], "external": true};
+window.dfnpanelData['8841d736'] = {"dfnID": "8841d736", "url": "https://tc39.github.io/ecma262/#sec-object-internal-methods-and-internal-slots", "dfnText": "internal method", "refSections": [{"refs": [{"id": "ref-for-sec-object-internal-methods-and-internal-slots"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2460"}, {"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2461"}, {"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2462"}, {"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2463"}, {"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2464"}], "title": "5.1. PublicKeyCredential Interface"}, {"refs": [{"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2465"}, {"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2466"}, {"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2467"}, {"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2468"}, {"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2460\u24ea"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2460\u2460"}], "title": "5.1.4. Use an Existing Credential to Make an Assertion - PublicKeyCredential\u2019s [[Get]](options) Method"}, {"refs": [{"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2460\u2461"}, {"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2460\u2462"}, {"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2460\u2463"}, {"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2460\u2464"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2460\u2465"}, {"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2460\u2466"}], "title": "5.1.5. Store an Existing Credential - PublicKeyCredential\u2019s [[Store]](credential, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2460\u2467"}], "title": "5.1.6. Preventing Silent Access to an Existing Credential - PublicKeyCredential\u2019s [[preventSilentAccess]](credential, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2460\u2468"}], "title": "5.2.1. Information About Public Key Credential (interface AuthenticatorAttestationResponse)"}, {"refs": [{"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2461\u24ea"}], "title": "5.8.1. Client Data Used in WebAuthn Signatures (dictionary CollectedClientData)"}, {"refs": [{"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2461\u2460"}], "title": "5.9. Permissions Policy integration"}], "external": true};
+window.dfnpanelData['c15f1628'] = {"dfnID": "c15f1628", "url": "https://tc39.github.io/ecma262/#sec-object-internal-methods-and-internal-slots", "dfnText": "internal slot", "refSections": [{"refs": [{"id": "ref-for-sec-object-internal-methods-and-internal-slots"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2460"}, {"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2461"}, {"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2462"}, {"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2463"}, {"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2464"}], "title": "5.1. PublicKeyCredential Interface"}, {"refs": [{"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2465"}, {"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2466"}, {"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2467"}, {"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2468"}, {"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2460\u24ea"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2460\u2460"}], "title": "5.1.4. Use an Existing Credential to Make an Assertion - PublicKeyCredential\u2019s [[Get]](options) Method"}, {"refs": [{"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2460\u2461"}, {"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2460\u2462"}, {"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2460\u2463"}, {"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2460\u2464"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2460\u2465"}, {"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2460\u2466"}], "title": "5.1.5. Store an Existing Credential - PublicKeyCredential\u2019s [[Store]](credential, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2460\u2467"}], "title": "5.1.6. Preventing Silent Access to an Existing Credential - PublicKeyCredential\u2019s [[preventSilentAccess]](credential, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2460\u2468"}], "title": "5.2.1. Information About Public Key Credential (interface AuthenticatorAttestationResponse)"}, {"refs": [{"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2461\u24ea"}], "title": "5.8.1. Client Data Used in WebAuthn Signatures (dictionary CollectedClientData)"}, {"refs": [{"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2461\u2460"}], "title": "5.9. Permissions Policy integration"}], "external": true};
 window.dfnpanelData['14fea63d'] = {"dfnID": "14fea63d", "url": "https://tc39.github.io/ecma262/#sec-own-property", "dfnText": "own property", "refSections": [{"refs": [{"id": "ref-for-sec-own-property"}], "title": "11.3. Add Virtual Authenticator"}], "external": true};
 window.dfnpanelData['b0fcb8d7'] = {"dfnID": "b0fcb8d7", "url": "https://encoding.spec.whatwg.org/#utf-8-decode", "dfnText": "utf-8 decode", "refSections": [{"refs": [{"id": "ref-for-utf-8-decode"}, {"id": "ref-for-utf-8-decode\u2460"}, {"id": "ref-for-utf-8-decode\u2461"}], "title": "7.1. Registering a New Credential"}, {"refs": [{"id": "ref-for-utf-8-decode\u2462"}, {"id": "ref-for-utf-8-decode\u2463"}, {"id": "ref-for-utf-8-decode\u2464"}], "title": "7.2. Verifying an Authentication Assertion"}], "external": true};
 window.dfnpanelData['0303e8e5'] = {"dfnID": "0303e8e5", "url": "https://encoding.spec.whatwg.org/#utf-8-encode", "dfnText": "utf-8 encode", "refSections": [{"refs": [{"id": "ref-for-utf-8-encode"}], "title": "8.5. Android SafetyNet Attestation Statement Format"}], "external": true};
@@ -11266,6 +11267,7 @@ <h2 class="no-num no-ref heading settled" id="issues-index"><span class="content
 window.dfnpanelData['assertioncreationdata-clientextensionresults'] = {"dfnID": "assertioncreationdata-clientextensionresults", "url": "#assertioncreationdata-clientextensionresults", "dfnText": "clientExtensionResults", "refSections": [{"refs": [{"id": "ref-for-assertioncreationdata-clientextensionresults"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}], "external": false};
 window.dfnpanelData['publickeycredential-issuing-a-credential-request-to-an-authenticator'] = {"dfnID": "publickeycredential-issuing-a-credential-request-to-an-authenticator", "url": "#publickeycredential-issuing-a-credential-request-to-an-authenticator", "dfnText": "Issuing a Credential Request to an Authenticator", "refSections": [{"refs": [{"id": "ref-for-publickeycredential-issuing-a-credential-request-to-an-authenticator"}, {"id": "ref-for-publickeycredential-issuing-a-credential-request-to-an-authenticator\u2460"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-publickeycredential-issuing-a-credential-request-to-an-authenticator\u2461"}], "title": "5.1.4.2. Issuing a Credential Request to an Authenticator"}], "external": false};
 window.dfnpanelData['effective-user-verification-requirement-for-assertion'] = {"dfnID": "effective-user-verification-requirement-for-assertion", "url": "#effective-user-verification-requirement-for-assertion", "dfnText": "effective user verification requirement for assertion", "refSections": [{"refs": [{"id": "ref-for-effective-user-verification-requirement-for-assertion"}], "title": "6.3.3. The authenticatorGetAssertion Operation"}], "external": false};
+window.dfnpanelData['dom-publickeycredential-store-slot'] = {"dfnID": "dom-publickeycredential-store-slot", "url": "#dom-publickeycredential-store-slot", "dfnText": "[[Store]](credential, sameOriginWithAncestors)", "refSections": [{"refs": [{"id": "ref-for-dom-publickeycredential-store-slot"}], "title": "5.1. PublicKeyCredential Interface"}], "external": false};
 window.dfnpanelData['dom-publickeycredential-isuserverifyingplatformauthenticatoravailable'] = {"dfnID": "dom-publickeycredential-isuserverifyingplatformauthenticatoravailable", "url": "#dom-publickeycredential-isuserverifyingplatformauthenticatoravailable", "dfnText": "isUserVerifyingPlatformAuthenticatorAvailable", "refSections": [{"refs": [{"id": "ref-for-dom-publickeycredential-isuserverifyingplatformauthenticatoravailable"}], "title": "5.1. PublicKeyCredential Interface"}], "external": false};
 window.dfnpanelData['dom-publickeycredential-parsecreationoptionsfromjson-options-options'] = {"dfnID": "dom-publickeycredential-parsecreationoptionsfromjson-options-options", "url": "#dom-publickeycredential-parsecreationoptionsfromjson-options-options", "dfnText": "options", "refSections": [{"refs": [{"id": "ref-for-dom-publickeycredential-parsecreationoptionsfromjson-options-options"}], "title": "5.1.9. Deserialize Registration ceremony options - PublicKeyCredential\u2019s parseCreationOptionsFromJSON() Method"}], "external": false};
 window.dfnpanelData['dictdef-publickeycredentialcreationoptionsjson'] = {"dfnID": "dictdef-publickeycredentialcreationoptionsjson", "url": "#dictdef-publickeycredentialcreationoptionsjson", "dfnText": "PublicKeyCredentialCreationOptionsJSON", "refSections": [{"refs": [{"id": "ref-for-dictdef-publickeycredentialcreationoptionsjson"}, {"id": "ref-for-dictdef-publickeycredentialcreationoptionsjson\u2460"}], "title": "5.1.9. Deserialize Registration ceremony options - PublicKeyCredential\u2019s parseCreationOptionsFromJSON() Method"}], "external": false};