Google appears pretty serious about making OpenSocial work.
We've been getting great feedback on the 0.5 version of the OpenSocial API. One of the top requests we've heard from application developers is for a non-spoofable version of IG_FetchContent. See below for our current thinking, which incorporates some pieces of OAuth, based on a proposal from Jeremiah Robison of Slide.
They are moving at Internet time. And bonus points for the reuse of part of OAuth!
BTW, they are asking for comments, so now is the time to discuss...