[agent2agent] Individual draft: session-bound agent identity

[Akira Okutomi <[e-mail]>]

Hi all,

I would like to share an individual Internet-Draft:

https://datatracker.ietf.org/doc/draft-okutomi-session-bound-agent-identity/

TL;DR:
This draft focuses on the verifier-side acceptance problem of ensuring that an otherwise valid agent action is accepted only in the intended principal, agent-instance, task, authority, delegation, and session context.

This is my first Internet-Draft. I wrote it because I could not find an existing specification that directly addresses this acceptance-side risk, and I would appreciate pointers to relevant prior work.

I would especially appreciate review of the core parts of the draft:

- Section 11: acceptance model
- Section 16: binding profile requirements
- Section 21: verification procedure

I would also appreciate feedback on whether the framing and scope are appropriate, and how the draft could be improved.

Best,
Akira