I dropped the ball due to other distractions. I'm still interested in collaborating on good SCAP support for Debian, but would gladly defer to Petter as sponsor. I'm not familiar with a SCAP-specific IRC channel. I'll make an effort to be on #debian-security when practical.