(maybe need other security precautions here, about OAuth redirects and registered callback endpoints? or can that be commentary?)
=
Duty:
=
Duty.1 of Introduce-Authorization-Server (probably reworded to be more formal)
=
Conditions precedent:
=
No preestablished ASO relationship with RSO: When the Authorization Server Operator has no preestablished relationship with the Resource Server Operator