The November 2 draft separates embedder delegation, caller discovery and provider exposure for cross-origin in-page tools.