[ai-control] Re: -04 drafts for evaluation

Farzaneh Badiei <farzaneh@digitalmedusa.org> Tue, 04 November 2025 20:54 UTC

Return-Path: <farzaneh@digitalmedusa.org>
X-Original-To: ai-control@mail2.ietf.org
Delivered-To: ai-control@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 9992B82E9647 for <ai-control@mail2.ietf.org>; Tue, 4 Nov 2025 12:54:35 -0800 (PST)
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -1.899
X-Spam-Level:
X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=digitalmedusa-org.20230601.gappssmtp.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id v6i5JlsKqcZi for <ai-control@mail2.ietf.org>; Tue, 4 Nov 2025 12:54:34 -0800 (PST)
Received: from mail-wr1-x432.google.com (mail-wr1-x432.google.com [IPv6:2a00:1450:4864:20::432]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id A03F682E9640 for <ai-control@ietf.org>; Tue, 4 Nov 2025 12:54:34 -0800 (PST)
Received: by mail-wr1-x432.google.com with SMTP id ffacd0b85a97d-426fd62bfeaso2485063f8f.2 for <ai-control@ietf.org>; Tue, 04 Nov 2025 12:54:34 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=digitalmedusa-org.20230601.gappssmtp.com; s=20230601; t=1762289673; x=1762894473; darn=ietf.org; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=VXhacXZCmHlXPgjMNkfrHwHAvDvseMrI72OESOaIeCs=; b=iByyBuc2zHUTzngkMCzTgvam34LwFrplmu2dNwCK3tw/Er70VwV4CGxhUQwNYCmeB+ a0QxUOTAZTQvExGX+7HKejxTTduJDGopos2hhJHeEwDgt9IpJjdyLMgmCC9sId9VwX+D K0qzq8bWEztBi9qHlKKZle2PvVQbvtkvAlSN4xXAWywdKFuZnIer0/RIZC/srECarEm6 gJNfg35K6G7KVpOnMA4bVJHpY+K+SFaHnCGYJWSScAS8EWsYDHfMuQmg9XlfhYQlCgMk 8m4kI0uWzMJzFJA4Ui0o+ooMYwGSI5OcniO5gUxS08T8Js3HS7PklM/MMU12wP3mu0c9 XAYA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1762289673; x=1762894473; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=VXhacXZCmHlXPgjMNkfrHwHAvDvseMrI72OESOaIeCs=; b=OlZypD5DicZCg7URpz0TNGpiIMLp+Q8WHgjAyHxE2+IyWIk5zwVjGDCeOzfD5tQ2cP zRmoee0bYrYvtoOLA2W68aZrpmYUloCTef7JbugKQiKTAo05QfyktLb7nUFCooA+O9M9 ugHlCpXg6F4anQaqCuUw8gbvhpfXdyo/UkDQHr9XBxGajhvlqRvq7/UIU0gQz5lO2J40 8Pl71iO0kK0HdV/lCqiH7fvCp/YE4pN1rX9Gq9hDwP+XJlofke+UVbaFGoLTJoBmgKcH 8qzd+hpcRQ9xpyO1Bkv6RdC3uxnEUU7+JUQRFAldEFotwnvYQkyrbq5/6TV8mio1r0u6 CPJg==
X-Forwarded-Encrypted: i=1; AJvYcCXQXi7QmCjYe7p5Tfocq/MZnB61j/SR1kz4GWVX2QMqrRMIAYNmUM1+H8cx0tatmAit6Bh6le/qJ+2+@ietf.org
X-Gm-Message-State: AOJu0YzY8uUW6FUnrTSC995LQW9xsOIxA1EFZpNyxsL08L40+JegqE2W oZ6L6V6BorMGeQKDL3p01TosRPyMTQUDnPVuoBuE4jRrgUlCrHZyMAcC1txlsrCbKzBQwzGaLHA KdysCBVDKcUdPYwc+RzGUmoFXzF3Tm/G/csnRoPjQuw==
X-Gm-Gg: ASbGncvktordaldcBRVP0ZYyO/3GH64XGJ3GsN771/fnFebSTpYkun/mu8LWw/H/df0 PW/khdYlVRGvUr+tjdGkZkF95YFwUokXjdFT8ptWnQ7wXVnxZkFfY04z2oSvRNsO8jCaNRf0tSD eY2SKB6XF+iT9CKUqb5w7ZjuMj6iOT2hz9FsjKtGX5x+DpPg6cH3qbwutv6BLUByRVrE2U3hZBI 4rPYvBUT7EQfVLbShUnXtAKsFsrdnzZ+kwtHzFXTdObpds0BtemLHF+nvcqCmHm8vTLmHxOGJdU dkLbWVCNs7IqffQa
X-Google-Smtp-Source: AGHT+IHkKEqObEmceY0X7dJx439JMXQSqRnxt1QNGSyYWgZp3dshlW2kCv3OtAGtDxunoOUObMisdIJFDdf9GZSoQGQ=
X-Received: by 2002:a05:6000:2405:b0:427:5eb:d82d with SMTP id ffacd0b85a97d-429e32e17e3mr625438f8f.17.1762289673524; Tue, 04 Nov 2025 12:54:33 -0800 (PST)
MIME-Version: 1.0
References: <CAGtJiV2jByVznrrdN1aa=-YyENcwMhAvWyH8tOLKF65RNiopcw@mail.gmail.com> <CAHAi=4yX0kRESyf0a-Sx5E9ZeyeRZV4DXDmH0yegGvQSW8nsEg@mail.gmail.com> <CAGtJiV3Kx1FDHAocCh4RxJxizQ+fY1ZkUCo72-R5MO8JN0h2bg@mail.gmail.com> <CAE+sOj=2cMXjV1xTddfTzCJs79=DXaAJcXzHmVoBrzuPGfvOAw@mail.gmail.com> <CH8PR02MB109703F941CF8E87A4A9A8146CDC4A@CH8PR02MB10970.namprd02.prod.outlook.com>
In-Reply-To: <CH8PR02MB109703F941CF8E87A4A9A8146CDC4A@CH8PR02MB10970.namprd02.prod.outlook.com>
From: Farzaneh Badiei <farzaneh@digitalmedusa.org>
Date: Tue, 04 Nov 2025 15:54:22 -0500
X-Gm-Features: AWmQ_bkH0-WYTK1e4yCe1U4QWVX2zKFZClhy4tWEWpR6hnv775Q_JlLxOoS66xk
Message-ID: <CAE+sOjkgN9RFopkhwDvQ784V26pZ1rd=1AKHnH5c9a5TdvWX_g@mail.gmail.com>
To: Leonard Rosenthol <lrosenth@adobe.com>
Content-Type: multipart/alternative; boundary="000000000000fb67e80642cb097e"
Message-ID-Hash: OKOC4H4OUTERBEKSWST26BICYD32GP6F
X-Message-ID-Hash: OKOC4H4OUTERBEKSWST26BICYD32GP6F
X-MailFrom: farzaneh@digitalmedusa.org
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: Lila Bailey <lila@archive.org>, Sebastian Posth <sebastian@liccium.com>, "ai-control@ietf.org" <ai-control@ietf.org>
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [ai-control] Re: -04 drafts for evaluation
List-Id: AI Control <ai-control.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/ai-control/DWef-sia6U5FYGHdsAD03whQRKU>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ai-control>
List-Help: <mailto:ai-control-request@ietf.org?subject=help>
List-Owner: <mailto:ai-control-owner@ietf.org>
List-Post: <mailto:ai-control@ietf.org>
List-Subscribe: <mailto:ai-control-join@ietf.org>
List-Unsubscribe: <mailto:ai-control-leave@ietf.org>

Thank you. yes exactly.  The paragraph says: "

   - Standard track document(s) describing means of attaching or
   associating those preferences with content in *IETF-defined protocols
   and formats*, including but not limited to using Well-Known URIs (*RFC
   8615 <https://datatracker.ietf.org/doc/rfc8615/>*) such as the Robots
   Exclusion Protocol (*RFC 9309
   <https://datatracker.ietf.org/doc/rfc9309/>*), and HTTP response header
   fields.



So in fact it does say that  1) attaching or associating can be used
through well known URIs (so no asset level signaling) and  2) robots.txt
can be used for signaling preferences and HTTP response header fields.

On Tue, Nov 4, 2025 at 3:15 PM Leonard Rosenthol <lrosenth@adobe.com> wrote:

> >we wouldn’t be expected to develop vocabulary that operates or must be
> implemented at the asset level, correct?
> >
> Actually, yes, the group is indeed chartered to do that.
>
> To quote from https://datatracker.ietf.org/doc/charter-ietf-aipref/,
> <https://datatracker.ietf.org/doc/charter-ietf-aipref/%E2%80%8B> with bold facing
> mine (to highlight key points).
>
> The Working Group will focus on attaching preferences to content either by *including
> preferences in content metadata* or by signaling preferences using the
> protocol that delivers content.
>
>
> The Working Group will deliver:
>
>    - A standard track document covering vocabulary for expressing
>       AI-related preferences, *independent of how those preferences are
>       associated with content*.
>       - Standard track document(s) describing means of attaching or
>       associating those preferences with content in *IETF-defined
>       protocols and formats*, including but not limited to using
>       Well-Known URIs (*RFC 8615
>       <https://datatracker.ietf.org/doc/rfc8615/>*) such as the Robots
>       Exclusion Protocol (*RFC 9309
>       <https://datatracker.ietf.org/doc/rfc9309/>*), and HTTP response
>       header fields.
>
>
> Leonard
> *From: *Farzaneh Badiei <farzaneh@digitalmedusa.org>
> *Date: *Tuesday, November 4, 2025 at 2:27 PM
> *To: *Lila Bailey <lila@archive.org>
> *Cc: *Sebastian Posth <sebastian@liccium.com>, Leonard Rosenthol <
> lrosenth@adobe.com>, ai-control@ietf.org <ai-control@ietf.org>
> *Subject: *Re: [ai-control] Re: -04 drafts for evaluation
>
> *EXTERNAL: Use caution when clicking on links or opening attachments.*
>
>
> Yes, thank you.
> I’d like to ask a quick clarifying question. To my understanding
> according to the charter and when we discussed engagement with other
> standards organizations, my understanding was that this referred to *l*iaising
> and coordination, rather than designing our work to accommodate their
> specific needs. For instance, we wouldn’t be expected to develop vocabulary
> that operates or must be implemented at the asset level, correct?
>
> On Tue, Nov 4, 2025 at 1:40 PM Lila Bailey <lila@archive.org> wrote:
>
> Thank you both, Leonard and Sebastian.
>
> This is very helpful context for those of us who joined the group more
> recently and didn't have the benefit of your briefing last year. I
> appreciate your patience and willingness to repeat yourselves.
>
> All best,
> Lila
>
>
>
> On Mon, Nov 3, 2025 at 7:03 PM Sebastian Posth <sebastian@liccium.com>
> wrote:
>
> Dear Lila,
>
> Thank you for these important questions about other standards using the
> vocabulary.
>
> *TDM·AI as a Registry-Based Implementation*
>
> "You have mentioned other standards that plan to use this vocabulary, but
> it would be extremely helpful if you could tell us exactly what those
> standards are."
>
>
> One example is TDM·AI (https://tdmai.org) – a registry-based attachment
> mechanism that intends to use the IETF vocabulary. We presented this at the
> IAB Workshop on AI-CONTROL in Washington (September 2024) and have
> participated in the working group since then.
>
> The approach is based on ISO 24138:2024 (ISCC)
> <https://www.iso.org/standard/77899.html> for content-derived
> identification and W3C Verifiable Credentials for cryptographic
> authentication of declarations.
>
> *TDM·AI Documentation*
>
> "It is impossible to understand the full impact of this vocabulary when
> the only context we have been looking at here in the IETF is robots.txt."
>
>
> We provide full documentation at tdmai.org that explains the
> registry-based approach in detail. TDMAI adopts the vocabulary's categories
> and definitions as a reference point to illustrate how domain-based
> attachment (as proposed by the IETF) can be translated into a
> registry-based system. TDM·AI demonstrates how preference declarations can
> be persistently and verifiably associated with individual digital assets
> via a registry, rather than relying solely on domain-based signaling like
> robots.txt.
>
> *Scope of Adoption*
>
> "I am also wondering if those other standards would be adopting the entire
> document, or just importing the categories and definitions?"
>
>
> The Internet Draft defines "a vocabulary for expressing preferences
> regarding how digital assets are used by automated processing systems. This
> vocabulary allows for the declaration of restrictions or permissions for
> use of digital assets by such systems."
>
> TDM·AI intends to adopt the entire vocabulary document – importing the
> categories and definitions and expressing them in digitally signed metadata
> declarations, which are externally bound to the ISCC fingerprint for anyone
> to resolve.
>
> As I've mentioned on the list and in meetings, in my understanding this
> vocabulary is supposed to establish common ground for communicating AI
> preferences. Declaring parties and AI model or system providers need to
> understand each other – the vocabulary should provide that shared language.
>
> *Current Status*
>
> You will recognise, TDM·AI currently aligns with
> draft-ietf-aipref-vocab-02 (July 2025) but recognizes that both the IETF
> vocabulary and our implementation remain works in progress, subject to
> change! As the IETF draft evolves, we will update our alignment
> accordingly. Our documentation should be regarded as preliminary guidance
> showing one possible application of the vocabulary, not a finalized
> standard.
>
> Hope that helps.
>
> Best regards,
> Sebastian
>
> --
> Sebastian Posth
> Liccium.com
>
>
> On Tue, 4 Nov 2025 at 01:55, Lila Bailey <lila@archive.org> wrote:
>
> Leonard-
>
> You have mentioned other standards that plan to use this vocabulary, but
> it would be extremely helpful if you could tell us exactly what those
> standards are. It is impossible to understand the full impact of this
> vocabulary when the only context we have been looking at here in the IETF
> is robots.txt. I am also wondering if those other standards would be
> adopting the entire document, or just importing the categories and
> definitions? The fact that other standards are going to use this makes it
> all the more important that we understand the full scope of all types of
> uses and users that will be impacted, and ensure that these standards won't
> have negative/unintended consequences for under-resourced or vulnerable
> populations.
>
> Thanks.
>
> -Lila
> --
> ai-control mailing list -- ai-control@ietf.org
> To unsubscribe send an email to ai-control-leave@ietf.org
>
> --
> ai-control mailing list -- ai-control@ietf.org
> To unsubscribe send an email to ai-control-leave@ietf.org
>
>