How do you envision GAM integrating into this flow given google/ads-privacy#65 (comment) ?

can you reopen this in https://github.com/prebid/Prebid.js

related: WICG/turtledove#851

You're thinking perhaps something like this using Prebid infra as top-level seller....

/*
  Excerpted from 
  https://github.com/WICG/turtledove/blob/main/FLEDGE.md#21-initiating-an-on-device-auction

   All fields that specify URLs for loading scripts or JSON (decisionLogicURL and trustedScoringSignalsURL) 
    must be same-origin with seller and must point to URLs whose responses include the HTTP response header 
    Ad-Auction-Allowed: true to ensure they are allowed to be used for loading Protected Audience resources.
  */
  {
    'seller': 'https://paapi.prebid.org',
    'decisionLogicURL': 'https://paapi.prebid.org/.../decisionLogic.js',
    'trustedScoringSignalsURL': 'https://paapi.prebid.org/...',
    
    // using headers (https://github.com/WICG/turtledove/blob/main/FLEDGE.md#252-using-response-headers)
    'directFromSellerSignals': ...

    'auctionSignals': {...},
    'requestedSize': {width: 300, height: 250},
    'sellerSignals': {...},
    'sellerTimeout': 500,
    'componentAuctions': [
      {'seller': 'https://pa.ssp1.com',
        'decisionLogicURL': ...,
        ...
      },
      {'seller': 'https://td.ssp2.com',
        'decisionLogicURL': ...,
        ...
      },
      ...
    ],
    'signal': /* optionally, an AbortSignal */...,
    'resolveToConfig': /* optionally, a boolean */...
  }

...where the decisionLogicURL is open source Prebid code that does a straightforward, first-price highest bid value wins (accounting for currency).

Prebid.org would need to enroll and publish attestations on whatever site it uses for this (if not prebid.org). Note that you would want to ensure that you don't have exposure since you are publishing attestations.

Then perhaps moving on to possibility of some seller-controlled/directed option, such as the seller's origin (seller enrolling &c.).

Component seller order is randomized for fairness (if TL auction order matters for performance).

The top-level seller has the ability to call

navigator.deprecatedReplaceInURN( ffConfigOrURN, macroNameValueMap )

if "standard macros" were spec'ed.

closing #9481 as a dupe

The top-level seller has the ability to call
navigator.deprecatedReplaceInURN( ffConfigOrURN, macroNameValueMap )
if "standard macros" were spec'ed.

Viz this, Google Ads requested another till-2026-feature to support SSP macros:
WICG/turtledove#931 (comment)

Prebid becomes the top level seller (TLS)

I think Prebid should stay out of the business of being a top-level seller, instead we should support member companies (publishers and ad tech companies) with tools and instructions for doing it.

Even if Prebid could get the attestation, support and costs will be a problem. People will need implementation and debug support and Prebid is not staffed to support the global internet. We will probably not be able use the nice free jsdelivr domain, and it costs a pretty penny to host high traffic files. Instead, major pubs should do this themselves and the managed Prebid services can do it for those that aren't staffed for support.

Reporting is another problem. Prebid is unlikely to become an analytics company. Do we know if the PAA reporting domain is required to match the decisionLogic domain? If not, then perhaps analytics vendors can plug into the PAA config.

@rdgordon-index asks the right question above. No Prebid-based solution can be taken seriously without knowing how it coexists with GAM. But GAM seems unlikely to cooperate without being forced to, so don't we have to assume that once the page gives control to GAM, we might not get it back? Assuming that's the case, there have been two scenarios discussed in various meetings:

1. When a Prebid contextual bid wins in GAM, the PUC is served, which could initiate an Interest Group auction.
2. If a publisher is willing to bypass GAM entirely above a certain threshold or for deals, Prebid could be configured to run the regular auction, then the IG auction and just directly render the result if it's above a configured threshold. (part of the scoreAd logic)

My understanding of the way IG auctions work in Chrome is that calling runAdAuction() is the end of the road. The page code cannot get an "IG bid" to pass anywhere. From https://developers.google.com/privacy-sandbox/relevance/protected-audience-api/ad-auction -- "the publisher page cannot inspect the winning ad."

That page also says "runAdAuction() returns a promise that resolves to a URN" - if that URN is empty when no IG bid wins, then seems to me both of the above options could work.

In my view, the project should distribute code to call rAA, either in a different repo or as part of the rendering workflow, and we should be caveating that prebid.org and jsdeliver do not have attestations or plans to file one, but who knows, things could change down the road. Currently, i see this issue as working on code, not infrastucture.

I second @patmmccann's comment. Prebid should definitely distribute the code that runs the top level auction. Prebid has the trust of the publishers and ad-tech providers. Multi-seller PAAPI was basically inspired by Prebid.js.

trustedScoringSignalsUrl must have the same domain as seller and decisionLogicUrl
With prebid.js as top-level seller domain the pub may not be able to use a KV server for trusted scoring signals

Prebid should definitely distribute the code

My issue is with publishers loading anything directly from files.prebid.org or from jsdelvr.net. (*)

Besides the domain issue Laurentiu notes, Prebid is not set up to pay for that level of expense from prebid.org, nor are we prepared to support an internet-wide service like this. I think it's more reasonable for the transfer costs and support issues to be spread across publishers and managed services.

(*) Prebid already has 3 of the top 10 files delivered globally by jsdelivr. Hosting a PAA auction file could quickly blow past even the currency file in traffic size.

documenting WICG/turtledove#1093 as the current pain

I'd support @patmmccann comment of "the project should distribute code to call rAA, either in a different repo or as part of the rendering workflow".

We have some sites / situations where we do not use GAM for display, instead relying just on client-side partners and render the highest bid directly on page.

Similarly, (and I recognize there is a lot left to be desired re: Video / PAAPI) but our Outsream player does not use GAM at all, as AdX policy does not support Outstream. Again we rely on client-side partners (Prebid + Amazon) and render the highest winning bid directly into VideoJS/IMA SDK. Having Prebid support the PAAPI Top Level Seller logic would be great.

(Scott Kolb, Longitude)