GNAP defines a mechanism for delegating authorization to a piece of software, and conveying the results and artifacts of that delegation to the software. This delegation can include access to a set of APIs as well as subject information passed directly to the software. Summary: I am not an expert in this area so have tried to provide a review as best I can. I believe draft is well written and ready for publication. Major issues: None Minor Issues: None Nits: None