update to HIT-Standards Privacy and Security selections

This week HIT-Standards meet again and there was some updates.
The Privacy and Security updates were fixes. They consisted of two items:
1) SOAP version now fixed at 1.2. There was a misunderstanding before that SOAP 1.1 was needed, but reality is that the marketplace using the selected healthcare standards isn't actually using any SOAP 1.1
2) Kerberos. This was a misunderstanding as well that I outlined on my blog

A big question came up after the meeting when Keith was looking at the whole specifications again. From the selections it is not clear what Topology is required in 2011. It is clear that SC112 is required, but this include multiple Topologies that use XDS(XCA), XDR, and XDM. I have been told that the answer is as Keith has stated. Pick at least one. Anyone will do. What is not as clear is that when you pick one, you need to pick both-sides of that one. That is you must pick a way to send and receive. For Example: If you pick XDM, then you must be able to publish to XDM and consume XDM. Ill be interested to hear Keith's perspective on consumption, does this mean just 'view' or does it mean 'import in full fidelity with complete attribution of source'?