[dmsc] Re: New Version Notification for draft-feng-dmsc-intent-routing-requirements-00.txt

Sumit Ahuja <sumit@mainlabs.ai> Fri, 14 August 2026 22:58 UTC

Return-Path: <sumit@mainlabs.ai>
X-Original-To: dmsc@mail2.ietf.org
Delivered-To: dmsc@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 78BF612A1D940 for <dmsc@mail2.ietf.org>; Fri, 14 Aug 2026 15:58:38 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1786748318; bh=RdJ0JQK7Pfr3jJKHfvGv/QSUxk6j6guOFVRrM4+lwnU=; h=Subject:From:In-Reply-To:Date:Cc:References:To; b=wviDdmJo4c7WCWPHe9GNaC7zMdC8zbhcP29KX7eJl12Bz0mR4rBEO2BHdXnY1bTSh cVid/l2B/kmflPHeaxIJ/F2nmIZKpflZp+iIQM5eKIFg52aK7v2+YVmTnN51yg1cun bZia6x3U+ECg9ABWI0+eHe2FYUUgzch4WYOoHRdc=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level:
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=mainlabs-ai.20251104.gappssmtp.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HhaJcDgd0jLS for <dmsc@mail2.ietf.org>; Fri, 14 Aug 2026 15:58:37 -0700 (PDT)
Received: from mail-qk1-x72d.google.com (mail-qk1-x72d.google.com [IPv6:2607:f8b0:4864:20::72d]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id C17D512A1D930 for <dmsc@ietf.org>; Fri, 14 Aug 2026 15:58:37 -0700 (PDT)
Received: by mail-qk1-x72d.google.com with SMTP id af79cd13be357-92e5d6f35c1so132115585a.0 for <dmsc@ietf.org>; Fri, 14 Aug 2026 15:58:37 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mainlabs-ai.20251104.gappssmtp.com; s=20251104; t=1786748317; x=1787353117; darn=ietf.org; h=to:references:message-id:content-transfer-encoding:cc:date :in-reply-to:from:subject:mime-version:content-type:from:to:cc :subject:date:message-id:reply-to:content-type; bh=C9Rxr55A5GSyVow2gWOf0gASgx2HaMLNSSJxr1cYHHw=; b=NikA9Y5jA2aPY+TAf2HBQ+7Y0NoTQIGDxaE8rCDH0PE6cxzcdi9yhg+XGrU12/m7Y+ Ka0x7jkEnEnWJW1LMkKAO550AZPL92L4kXHrTmUjPIXPKOADBjXTq4UCTXfOekRRYu+j oxruhZ8Ayy/9aMiAqtLS6LhArzgKcIJ15eZASAraOrLAOb85mV4N8LkXhKD3uIIenCNs L5XjRlUQX19Qpnp1D3eNJ3w+2BmDYr93JulLtYIKn2sKmYKX/gSxg73gQ5jl067EYFVY 8cTA45H0Bet5CcrOnDM7dYKaxOUwXihUi/CJN6GaWI2qiZjn4YLXK8hJ8BOvsSFD2WJ/ ydpQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1786748317; x=1787353117; h=to:references:message-id:content-transfer-encoding:cc:date :in-reply-to:from:subject:mime-version:content-type:x-gm-gg :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to :content-type; bh=C9Rxr55A5GSyVow2gWOf0gASgx2HaMLNSSJxr1cYHHw=; b=AgS26ZaZfCZcqi2XIFCdDEsgFLrWMPd1Wl7x2931wrQQrD0e+4xx0mCUG0Eqjg5EUt /icPu9Pi8sKfX2EtgcCyMqKcMff8RM9kyfkmP29mpi50PkTM+toYZGE4KIfsVJTsYpAz ppZ2lzoOdwJQf7fOJPC3dtR4NyKprqeyn3VKf2c8i8VTus19RtJGrYw5Ceyd8FZRt3bt 0bvNcZGNWOk03hRGhBdf2hLpFRVdvlhX7uPqKvGLOc0Lsh5bQuSSlNQI1BiOp6XLYV4x VbfLV5pQCl83qb4dEJnosUf9ceirayhm5MkRgAGzxd3UgZNgZ8Mb53GLX2XLiGqHnzJi OaWg==
X-Gm-Message-State: AOJu0YxDcCelUJS6UXNA5QEHBbi3Lm8Dn1NhvqpdQ+N7rL2Nnaw/zHVn InZLoAkjAnKY7vxB/rwAjj/D2SCRNuw2OJ8VkWJ9uONRkOy0MVcssFLyvNX2jBKJdmDQaav6OCo QxYGxWA==
X-Gm-Gg: AR+sD12NNz6qTaO+yDqVxH8DIFh1t+eIm6zGXgyEErt+KC48kadh821GcMUXhhL6A+9 zqYehipTgI840B5tivdXyKNYesKhnMGCD/LYY0ggIjqHesOF0DxG37mbS7GZSu60wvVfy4HNPda REZHuJFg5YoPZB+axmoaMcYB3kHQgLvKix8eX5Hrv7wNPPZ1i64wsohbryPef0bHSck/Y80Y9BF oKUvX2lAK63yVwt2Bpy6BjG4ke4cKxDc38wjT5njmq5GI8oDeQpNL8zexKSwNMc1Jgc2eeZ9NJe +tMztNXMOviw4gbt/AjnAhhq0LMXZ5Uma9N5ATnqYmJTtvyAKWUcOrZhtil/KjSrPi12gCG3udT /hej6LPB3h0Nk9/x4gBQNXIZuPGCn/8b66zlRMr3fXeTeCy3eWxC99BwVdcvIu/lFkEfD8PWhgp iahnMlZUGIzN5xb4u4xw7+f7dinfpJ5odZy2IbGWjKWVT2GtHpqpC+f5D8j3DZx7X9sKGA8bVMl +TDfyvGzLfaHatYUGFPya/z8Eh3+5GgapAvoSfRhU/bMqfABgPF
X-Received: by 2002:a05:620a:8215:b0:934:a2f0:33c1 with SMTP id af79cd13be357-936d235d4e0mr768519485a.33.1786748317178; Fri, 14 Aug 2026 15:58:37 -0700 (PDT)
Received: from smtpclient.apple (ec2-13-217-21-138.compute-1.amazonaws.com. [13.217.21.138]) by smtp.gmail.com with ESMTPSA id af79cd13be357-936ce250c20sm371470285a.47.2026.08.14.15.58.35 (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Fri, 14 Aug 2026 15:58:36 -0700 (PDT)
Content-Type: text/plain; charset="utf-8"
Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3864.600.51.1.1\))
From: Sumit Ahuja <sumit@mainlabs.ai>
In-Reply-To: <0FC8C55C-BF0A-44E0-A6DB-678296416243@mac.com>
Date: Fri, 14 Aug 2026 18:58:25 -0400
Content-Transfer-Encoding: quoted-printable
Message-Id: <460C065E-241A-433A-A789-AB6616C329D3@mainlabs.ai>
References: <178670000699.881.8429414973713495819@dt-datatracker-7c6ddbc678-86d5j> <CAMaYprsK_vpUmpjZ=6-Bpd0azsogjsaackgHm2rDM5PK7DLLNQ@mail.gmail.com> <0FC8C55C-BF0A-44E0-A6DB-678296416243@mac.com>
To: dmsc <dmsc@ietf.org>
X-Mailer: Apple Mail (2.3864.600.51.1.1)
Message-ID-Hash: JCCZIZZBGHPQQPSI7ID4PPJ4DJHMS753
X-Message-ID-Hash: JCCZIZZBGHPQQPSI7ID4PPJ4DJHMS753
X-MailFrom: sumit@mainlabs.ai
X-Mailman-Rule-Hits: member-moderation
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address
CC: chong feng <fengchongllly@gmail.com>
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [dmsc] Re: New Version Notification for draft-feng-dmsc-intent-routing-requirements-00.txt
List-Id: Dynamic Multi-agent Secured Collaboration <dmsc.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/dmsc/TRDaUTTFkq0_gVR6ewVQBus62ag>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dmsc>
List-Help: <mailto:dmsc-request@ietf.org?subject=help>
List-Owner: <mailto:dmsc-owner@ietf.org>
List-Post: <mailto:dmsc@ietf.org>
List-Subscribe: <mailto:dmsc-join@ietf.org>
List-Unsubscribe: <mailto:dmsc-leave@ietf.org>

Chong,

On your four open questions, using an instrument from the agentproto
charter discussion that I think applies cleanly here. Mirja Kuehlewind
put it as: what needs to be standardised to survive cross-domain,
rather than remaining an implementation choice. It is a sharper filter
than asking what a mechanism ought to do, and it sorts your four
unevenly, which is useful.

Capability aggregation across domains does not survive as an
implementation choice. Two domains that summarise differently cannot
consume each other's advertisements at all, so the summarisation form
has to be common or there is nothing to interoperate on. That one is
settled by the test.

Session-agnostic delivery is settled by the test in the direction you
argue, and I think the argument is stronger than the one in your
rationale. A delivery layer that presumes a session requires both
parties to share that presumption, so the presumption itself becomes a
thing that must be agreed cross-domain. A layer that presumes nothing
requires no agreement. Session-agnostic is the choice that minimises
what has to be standardised, which is a better reason for it than
generality.

Bounded state I do not think is independent. It is a property of each
node's own resource use, which sounds local, but whether any node can
achieve it depends entirely on whether capability summarises. It reads
as a consequence of the aggregation answer rather than a separate
question.

Where the selection decision sits is the one the test does not settle,
and I think that is the correct outcome rather than a gap. Either
location works, and different deployments will want different ones for
reachability reasons you already give. What does not survive as an
implementation choice is that the two parties agree which location is
in force for a given interaction. REQ-8 already carries exactly that
pattern for the delivery endpoint: the handler declares, the
infrastructure honours the declaration, and nothing is mandated. The
selection location looks like the same shape, and if so the question
resolves to declare-rather-than-mandate rather than to picking a side.

One observation about the document as requirements rather than about
any individual requirement. Stating requirements and prescribing no
mechanism is the right discipline, and it has a failure mode: a
requirement that names a property without saying what would satisfy it
can be met vacuously, because there is no test to fail.

REQ-13 is where that bites hardest. Cross-boundary interoperation must
be explicitly authorised and policy-controlled. Authorised is
checkable. Policy-controlled is not, because nothing in the document
says what a policy expresses, and a requirement that cannot be failed
is not a yardstick. As written it is satisfied by an access list, and
equally satisfied by an implementation that declares a policy and
expresses nothing in it.

I am working on a mechanism draft addressing that requirement
specifically, which I expect to file next month. I raise it now rather
than on filing because the requirement is yours and the yardstick
should be able to judge whatever arrives against it, including this.

Sumit P. Ahuja
Main Labs


>> On Aug 14, 2026, at 05:37, chong feng <fengchongllly@gmail.com> wrote:
>> 
>> Hi all,
>> 
>> I have just submitted a short requirements draft for intent routing in
>> multi-agent systems:
>> 
>> draft-feng-dmsc-intent-routing-requirements-00
>> Requirements for Intent Routing in Multi-Agent Systems at Internet Scale
>> 
>> It tries to pin down one thing: what any mechanism that routes an agent's
>> intent to the right handler has to satisfy, independent of whether that
>> mechanism is a gateway, a directory, or a routing network. The requirements
>> are deliberately solution-agnostic. There is no prescribed architecture.
>> 
>> This grew out of reading the gateway requirements and the MACP discussion on
>> this list, and out of my own AIN work. A few of the requirements are points I
>> would genuinely like the list's view on, because they are the kind of thing
>> the scope discussion will eventually have to settle: bounded state, how
>> capability gets aggregated across domains, where the selection decision sits,
>> and whether the delivery layer should be session-agnostic.
>> 
>> Comments welcome, on the list or off.
>> 
>> Cheers,
>> Chong Feng
>> 
>> ---------- Forwarded message ---------
>> 发件人: <internet-drafts@ietf.org>
>> Date: 2026年8月14日周五 17:33
>> Subject: New Version Notification for
>> draft-feng-dmsc-intent-routing-requirements-00.txt
>> To: Chong Feng <fengchongllly@gmail.com>
>> 
>> 
>> A new version of Internet-Draft
>> draft-feng-dmsc-intent-routing-requirements-00.txt has been successfully
>> submitted by Chong Feng and posted to the
>> IETF repository.
>> 
>> Name:     draft-feng-dmsc-intent-routing-requirements
>> Revision: 00
>> Title:    Requirements for Intent Routing in Multi-Agent Systems at
>> Internet Scale
>> Date:     2026-08-14
>> Group:    Individual Submission
>> Pages:    11
>> URL:      https://www.ietf.org/archive/id/draft-feng-dmsc-intent-routing-requirements-00.txt
>> Status:   https://datatracker.ietf.org/doc/draft-feng-dmsc-intent-routing-requirements/
>> HTML:     https://www.ietf.org/archive/id/draft-feng-dmsc-intent-routing-requirements-00.html
>> HTMLized: https://datatracker.ietf.org/doc/html/draft-feng-dmsc-intent-routing-requirements
>> 
>> 
>> Abstract:
>> 
>>  The rapid proliferation of autonomous AI agents across enterprise and
>>  Internet-scale deployments creates a structural challenge that
>>  existing agent frameworks cannot address: how to enable any agent to
>>  reach and invoke any other agent's capabilities without pre-
>>  established bilateral integration, across organizational boundaries,
>>  at Internet scale.
>> 
>>  This document states the normative requirements for that problem.  It
>>  prescribes no solution, no specific mechanism, no message format, and
>>  no assumption of centralized or distributed architecture.  Its
>>  purpose is to establish a verifiable yardstick against which any
>>  claimed "intent routing" solution can be judged.
>> 
>> 
>> 
>> The IETF Secretariat
>> 
>