I-D Action: draft-niyikiza-oauth-attenuating-agent-tokens-02.txt
internet-drafts@ietf.org Tue, 27 October 2026 03:07 UTC
Received: by mx.ietf.org (Postfix) id BD82147 for <i-d-announce@ietf.org>; Tue, 27 Oct 2026 03:07:36 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ietf.org; s=mail; t=1793070456; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=gx0ENsZ0ftjhaRGjBo/xEOC3lZmUS8SNgryHUS0vUvc=; b=qraakh67zYvsKlAUY3Hecm0ZjcSbomlWIOcVHzyC0NURlIiufonBG2dDM7BGQANP891Ehe U5HWQdvk0BcBBwz8m+X4TXRWY+L7EgdOF/S9uwNwXrVGRzvr26xCtHPI4riatqrJ22A+/w +QidiozrX9rbASgPcPH8jQSDrm9Y2js=
Authentication-Results: ORIGINATING; auth=pass smtp.auth=mail2@ietf.org smtp.mailfrom=internet-drafts@ietf.org
Received: from [10.244.9.51] (gaia.k8s.ietf.org [4.156.85.76]) by mail2.ietf.org (Postfix) with ESMTP id 8E6C913B20078 for <i-d-announce@ietf.org>; Mon, 26 Oct 2026 20:07:36 -0700 (PDT)
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: internet-drafts@ietf.org
To: i-d-announce@ietf.org
Subject: I-D Action: draft-niyikiza-oauth-attenuating-agent-tokens-02.txt
X-Test-IDTracker: no
X-IETF-IDTracker: 12.82.1
Auto-Submitted: auto-generated
Precedence: bulk
Message-ID: <179307045651.411219.13412704607126220659@dt-datatracker-7dc874ff8f-sl5zv>
Date: Mon, 26 Oct 2026 20:07:36 -0700
Message-ID-Hash: ILAAPY243SNW3AHNLQJP3CFZQMBUNFYA
X-Message-ID-Hash: ILAAPY243SNW3AHNLQJP3CFZQMBUNFYA
X-MailFrom: internet-drafts@ietf.org
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; loop; banned-address; header-match-i-d-announce.ietf.org-0; emergency; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.10
Reply-To: internet-drafts@ietf.org
List-Id: Internet Draft Announcements only <i-d-announce.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/i-d-announce/VGIFlbyeYHZqK4KSunjIuUWh4UA>
List-Archive: <https://mailarchive.ietf.org/arch/browse/i-d-announce>
List-Help: <mailto:i-d-announce-request@ietf.org?subject=help>
List-Owner: <mailto:i-d-announce-owner@ietf.org>
List-Post: <mailto:i-d-announce@ietf.org>
List-Subscribe: <mailto:i-d-announce-join@ietf.org>
List-Unsubscribe: <mailto:i-d-announce-leave@ietf.org>
Internet-Draft draft-niyikiza-oauth-attenuating-agent-tokens-02.txt is now available. Title: Attenuating Authorization Tokens for Agentic Delegation Chains Author: Niki Aimable Niyikiza Name: draft-niyikiza-oauth-attenuating-agent-tokens-02.txt Pages: 73 Dates: 2026-10-26 Abstract: This document defines Attenuating Authorization Tokens (AATs), a signed credential format for task-scoped delegation in AI agent systems. An AAT encodes the tools an agent may invoke and the argument constraints that apply to those invocations. A token holder authorized to delegate can derive a token offline with equal or narrower authority, subject to the parent token's depth and lifetime limits. The resulting delegation chain is verifiable offline by any enforcement point that has the root issuer's trust anchor key. This specification profiles the OAuth Rich Authorization Requests format (RFC 9396) for tool-level capability claims, adds delegation- chain claims, and defines a core constraint vocabulary for argument restrictions. The chain verification algorithm authenticates each delegation step and enforces monotonic attenuation without network contact with the root issuer. The IETF datatracker status page for this Internet-Draft is: https://datatracker.ietf.org/doc/draft-niyikiza-oauth-attenuating-agent-tokens/ There is also an HTMLized version available at: https://datatracker.ietf.org/doc/html/draft-niyikiza-oauth-attenuating-agent-tokens-02 A diff from the previous version is available at: https://author-tools.ietf.org/iddiff?url2=draft-niyikiza-oauth-attenuating-agent-tokens-02 Internet-Drafts are also available by rsync at: rsync.ietf.org::internet-drafts
- I-D Action: draft-niyikiza-oauth-attenuating-agen… internet-drafts