point XACML at the OASIS 3.0 core specification

[kanywst]

What does this PR add?

Swaps the XACML entry from Wikipedia to the OASIS standard itself.

- [XACML](https://en.wikipedia.org/wiki/XACML)
+ [XACML](https://docs.oasis-open.org/xacml/3.0/xacml-3.0-core-spec-os-en.html)

Follows the same reasoning as #33: the previous Add Authorization submission upstream (#2216) drew a reviewer objection to Wikipedia links standing in for primary sources. XACML has a canonical OASIS spec, so there is no reason to point at an encyclopedia article.

ALFA is deliberately left on Wikipedia

The only OASIS-hosted ALFA document is a working draft behind a groups.oasis-open.org/higherlogic/ws/public/download/55228/... URL. That is the same class of fragile, restructure-prone link that #33 just moved ReBAC away from, and it is a WD01 rather than a ratified spec. Wikipedia is the more durable pointer here until OASIS publishes ALFA properly.

Description unchanged. No duplicate links. markdownlint-cli2 reports only the pre-existing <div>.

[coderabbitai]

Warning

Review limit reached

Next included review available in 44 minutes.

Check out review usage here.

View limit details

Limit details: You’ve used the included review currently available.

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

Learn how review limits work.

Review configuration:

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Team

Run ID: af62bcef-3944-44a8-b090-7cd60c64042d

📥 Commits

Reviewing files that changed from the base of the PR and between ed9bf1c and ece4dcd.

📒 Files selected for processing (1)

• README.md

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[claude]

Review summary

Clean, single-purpose diff — no findings.

• README.md:94: XACML now points to the canonical OASIS 3.0 core spec instead of the Wikipedia article. This is a legitimate primary-source upgrade, consistent with the precedent set in replace Wikipedia links in Access Control Models with primary sources #33 for ReBAC.
• Description text, entry ordering, and heading structure are unchanged, so the Contents section and category fit are unaffected.
• ALFA is correctly left pointing at Wikipedia per the PR description's rationale (no ratified OASIS-hosted spec exists yet) — agreed this is the more durable link for now.

No curation, duplication, or category-fit issues found.