open-standards/wai/changes/2026-11-09-audience-decisions-and-territories.md

wai.video.audience and wai.delivery.territory: blackout decisions from an aggregated location, and where a publisher may be shown

• audience-decision registers the record wai.video.audience (wai-audience-decision): a decider's signed decision of whether the sessions in one region may be shown a programme over a span, under the blackouts in force. Each blackout is named by the id a session class carries (http-delivery Appendix H blackouts) and lists its regions in rung-price §2's region codes, with the programme shown in its place, if any.
• A session's location is aggregated before it leaves the session (§4.3): to the one listed code that holds it (its subdivision when listed, else its country when listed), to outside, or to unresolved when it holds none or only a country of which subdivisions are listed. The aggregation decides what the location would, and says no more of it. A decision whose evidence holds anything else, or a region finer than the aggregation gives, is refused audience_location_not_aggregated; one whose region the blackouts neither list nor hold is refused audience_region_not_in_set.
• The blackouts that apply (every one in force, for an unresolved session), the verdict (show, withhold, or alternate when every blackout that applies names one programme in its place) and that programme follow from the blackouts and the region; a verifier recomputes them (audience_decision_inconsistent). A session class of the programme carries the blackouts that apply as its blackouts, and its geo is the region's country; a verifier given both states the class's hash, by which a playlist receipt names it.
• It registers the record wai.delivery.territory (wai-territory): a publisher's signed statement of where its content may be shown, everywhere, only in some regions or everywhere but some, in the same codes. The publisher's latest statement stands alone, and one that lapses or is contradicted at its instant revives none. A verifier reports the territory (within, outside, undetermined, or unstated with its reason) beside a server key's placement, which cache-authority §4.4 computes from its own inputs alone and which no statement changes; a statement that names a server, an origin or a role is refused territory_scopes_serving. cache-authority §4.3 and §4.4 are unchanged.
• Both are route-record documents signed in their canonical form under their own domains (wai:audience-decision, wai:territory); a signature over any other bytes is refused.
• The reference is the audience_decision module of wai-rs (feature audience_decision); the corpus is live-conformance/audience/, and audience_decision_verify.py is its second implementation.