[Audit] Proposed charter change to clarify VCON relationship

Jonathan Rosenberg <jdrosen2@gmail.com> Fri, 02 October 2026 16:58 UTC

Received: from mail-oi1-x236.google.com (mail-oi1-x236.google.com [IPv6:2607:f8b0:4864:20::236]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature ECDSA (prime256v1) server-digest SHA256) (No client certificate requested) by mx.ietf.org (Postfix) with ESMTPS id 6A10F4B for <audit@ietf.org>; Fri, 02 Oct 2026 16:58:16 +0000 (UTC)
Authentication-Results: mx.ietf.org; dkim=pass header.d=gmail.com header.s=20251104 header.b=IAUIy8nj; spf=pass (mx.ietf.org: domain of jdrosen2@gmail.com designates 2607:f8b0:4864:20::236 as permitted sender) smtp.mailfrom=jdrosen2@gmail.com; dmarc=pass (policy=none) header.from=gmail.com; arc=pass ("google.com:s=arc-20260327:i=1")
Received: by mail-oi1-x236.google.com with SMTP id 5614622812f47-4af173320f9so872205b6e.2 for <audit@ietf.org>; Fri, 02 Oct 2026 09:58:16 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1790960290; cv=none; d=google.com; s=arc-20260327; b=CLPeZnmj77CRHTK2F7moWHn4+/g2EvfOP1tTqSKQpVHtsHlg/9IjsykKflTrdJoe1L 4tXK4eCcwRQjvAFD+i0prDjBKrQMC+r8tWDxPLqQfUXl8yGk+4vdcbMUDgdoAsCiHtC8 RCgf4+9XYt29mmn1r8uxFtOwQW7JHmISPhVQ4J+0DHHgtFzbzPSYOzJ3qqPQgL9Q5CYC IgiDeKwkw+lKMbB3BKvAUIkOcZHcOWQuiu7ooz6xMnX1L7mkyO1dpe79zMzz8kmaXp4f PkX/G/KPUPUS8/K0C2eMSMvXKf64G+z6X0vQMZlgCSXxCLnKXPTa/RF18ZhN3FhFK9fE kORQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=to:subject:message-id:date:from:mime-version:dkim-signature; bh=VgXIcTwn+rauYF5O/t8OUz/YAsWLBzgg3dHAowxJtvk=; fh=aT8dTGrHiF8DUzLs6HMVVSz5W3YtxFb2nQGd1mpDdFY=; b=BOgm4yhIu13i2a/VzKWgdH+/41HBtzMgkAqPvjrXC1PG51+gzM6xc1gKJzWWFoJhhX FH1b6KzglKHbkGPGH6REWVbz0FVUBcC3228p4TBNqCupTUklnZkkGrC7oqjwaXFoUK81 A0TC7fmypuZSH2T7kFBXlRMaGZvazo/z+EF5NsTeuuKq/w28JPckC9jlF3dJNwFYKdPl PMTWtyiJ37AhEXIu17lyrhbQiiZmdfeRmkFPxO2w8x6sBIbLlzhziKkgEwF8uC4IK7X2 PHmKWUn1diNcJDCfB7d/lJbCJKNK6O6szvJbwVVJtQqGogAYdRa3Owrtt68KDjgNJGeh tXEg==; darn=ietf.org
ARC-Authentication-Results: i=1; mx.google.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1790960290; x=1791565090; darn=ietf.org; h=content-type:to:subject:message-id:date:from:mime-version:from:to :cc:subject:date:message-id:reply-to:content-type; bh=VgXIcTwn+rauYF5O/t8OUz/YAsWLBzgg3dHAowxJtvk=; b=IAUIy8nj58gPfJG0zAPJUgPky4U9llI7DMV4/5i3iGDLpMN+LqhDbcRjiRvUcGOneX qF8Kcib6FfIXlPGwqp6Q9D6uHagmIE8Fgv39UEtCUBJqKWUn6CqznhLC6Rbxk1W4Wcme QLxGztq7rmKJF1pR3Y1g4arkn9gS9guDsrgUKrY9sfsYp2yYpgx1ehJ7/moERmLEDD98 hw3qFYefNHpcjMlCHw9X1jAHwhhHHTzfUouLXiZy/mO/v1NgcwESS0ktGOo/d7QhkELY v0LoyTerpLbZFKnHpikS1L829qk0Jn9GnDAsU7A1OXpJHwz+hg9n2Nsy9qdWGZlUpzk0 bRwQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1790960290; x=1791565090; h=content-type:to:subject:message-id:date:from:mime-version:x-gm-gg :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to :content-type; bh=VgXIcTwn+rauYF5O/t8OUz/YAsWLBzgg3dHAowxJtvk=; b=LDLP4Kob/I+3CyJwl5Ivp6A5eVoZiaPEz9+/nYV6b4KB5/g0t3mTntuOmjX9wUpgA4 fxkYkrwYHdibxhjBSTNXYKxfcUury815YiXlxbSwEWBx0gdk85kH/A4dQiUPkJ4JlYt9 9ygZ8Gdb69Ty4EHXAOXY/KaVF2wCWmGz4VjpFkAeLRGfTlu8xhg+5vERidR9aN3jCyQr M0e/0IfPUFQ1a7ieBWfr+jlwKvt7h4oacVqXwIf8IRjIYyUl1X1HA2afWLUD96EvX21+ k76Ah9WRRyVPuw3Ip4CWYAPfK45645CG/YUTcqul4JlZFX+dllkVBypiu4bmNt3pru69 3jaQ==
X-Gm-Message-State: AFuF++loEKv7vVIVKaIimYVL7qfLrfbyWDSZRxfCZmuLTE+LAKvHufvT MG99c2lmOe9JSv9MdNh/yKxJXCY90/uDGomLbdMvq7Uvk6zQFTcpZKJ55k9nmFkVg+rRpaprEz9 ppzMj6B+imDukL5rk9xof4Qn3S0q534OhAwNI
X-Gm-Gg: AYBFou3zY1ofmz7ThrZC7oiK/PG+HcHrshrAT5+/JMttypIiVfMQspN6xEgyuRtNgPr guqfCSTIHY/5CK3V0DJSAsk4/goHLbeAeMD13dZ/lp2PZrjj9mYzsa7imGeOxxgDivWoDzlzVah F/qynfd8ahZogRs6at6fL9tlPTRRipSAmJKwGyCpLG8W+L7+i2kHOzs4ieNOn8GyjYuBzorKpl5 Z4MyL8+zFJ6dV3EGFDd35DbghuYm6iG7QIZ55StGxtBnX035gQ0MZGrqC9DXp42NO1qcAyDyNjl MiO13HDS7hPIrv5E8ixaq3aBA3S/zGtvZ1ElvzQtaEVCcEVnFrfQPtBxOsPfrPHs4Q==
X-Received: by 2002:a05:6808:3084:b0:4f4:d7:b15b with SMTP id 5614622812f47-4f6797bf404mr37730b6e.4.1790960290439; Fri, 02 Oct 2026 09:58:10 -0700 (PDT)
MIME-Version: 1.0
From: Jonathan Rosenberg <jdrosen2@gmail.com>
Date: Fri, 02 Oct 2026 12:57:59 -0400
X-Gm-Features: AclHuK8dDYHShdP2ENz4ZoZYI6cXLDbPx5V3NqJ_SutAoOGfcMhe0oiofK-5VRc
Message-ID: <CA+23+fH8og1z9Sa-wxyQpSD6Q_kd_1FF_Jn=KvXvWXovvG4GLw@mail.gmail.com>
To: audit@ietf.org
Content-Type: multipart/alternative; boundary="000000000000eb2614065cde6f20"
X-Spamd-Bar: --
Message-ID-Hash: 7O3KABQSSB6NNKY62SCLTJOKQRKACCH7
X-Message-ID-Hash: 7O3KABQSSB6NNKY62SCLTJOKQRKACCH7
X-MailFrom: jdrosen2@gmail.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; loop; banned-address; emergency; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.10
Precedence: list
Subject: [Audit] Proposed charter change to clarify VCON relationship
List-Id: "Agent Use of Delegation and Interaction Traceability (AUDIT)" <audit.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/audit/_b3Bm4VRHjHowwt1ujFS68Jsq6w>
List-Archive: <https://mailarchive.ietf.org/arch/browse/audit>
List-Help: <mailto:audit-request@ietf.org?subject=help>
List-Owner: <mailto:audit-owner@ietf.org>
List-Post: <mailto:audit@ietf.org>
List-Subscribe: <mailto:audit-join@ietf.org>
List-Unsubscribe: <mailto:audit-leave@ietf.org>

I've opened a PR against the charter to revise the second deliverable, to
clarify the relationship with VCON explicitly:

https://github.com/mirjak/audit-bof-preparation/pull/61

Here is what I wrote:

One or more Standards Track RFC(s) that identify and reuse existing or
specify new IETF data models that can represent audit information about
agents and delegated systems (e.g., interaction records, references to the
identities of participating entities, delegation context, authorization
state over time, or action provenance). For interaction records - the
expectation is that the group will leverage the VCON format. Extensions to
VCON to add data needed to model AI agent conversations will happen within
the VCON group, and AUDIT will reference and (as needed) introduce profiles
or use cases for it. This applies in general - if existing data models are
identified the RFC(s) might create profiles that scope them to a degree of
disclosure that is appropriate for audits.


Thx,
Jonathan R.