Thomas Sutton

A token_refresh grant should issue a new refresh token only when the existing refresh token is due to expire before the new bearer token.

It should be possible to control the provision of refresh tokens. Particular policies that would likely be useful: - Include/exclude for particularly non-/sensitive scopes. - Include/exclude for particularly non-/trusty-worthy clients.

Implement support for pure move operations (i.e. where the moved value is only moved, not modified, after application of the patch) between sibling pointers. 1. Track the value deleted by...

Add benchmarks - [ ] criterion - [ ] weight

Consider, very carefully, using and supporting `lens`. In particular, `get` and `applyOperation` are optical.

Refactor diff algorithm implementation

1

The current implementation is pretty messy.

- [ ] Clean up ridiculous naming of free variables. - [ ] Produce decent output

Change the type of `resultEvidence` (the function/s which combine the evidence for subgoals of a result into evidence for the original goal) so that it can fail without raising exceptions.