The new specs look good to me. Its good to have the scope clearly defined so AMS doesn't become an unwieldy beast (which it certainly may have become).
The customized permissions of attribue values aspect of this doc wasn't discussed much, in part because we haven't decided exactly how this will happen. This will be fleshed out later when the functionality is built into contacts, and for those of you that are worried, it will not create objects for each attribute value - it will be simpler than that (programatically as well as in terms of efficiency). That ability is sometihng that is more of a long term goal for contacts so we can work with the current model first and figure it out when things are more stable.
I hope to implement much of this before I leave for Christmas... although I'm launching a new site between now and then so that might be dreaming :)