Success criteria - already released APIs

[svgeesus]

APIs that cannot be demonstrated to be implementable securely within the default browser context will not be released.

APIs that have already released but are then demonstrated to not be implementable securely - should they be rescinded or moved back to Working Draft?

[anssiko]

I think that needs to be evaluated on a per spec basis in consultation with implementers should such an event occur.

W3C Process does prescribe the considerations for rescinding vs return to WD, which seems adequate.

[svgeesus]

Sounds good, thanks!