I-D Action: draft-mih-agent-disclosure-envelope-00.txt

[[e-mail]]

Internet-Draft draft-mih-agent-disclosure-envelope-00.txt is now available.

   Title:   Disclosure Envelope Profile for Agent Action Capsules
   Author:  Steven Mih
   Name:    draft-mih-agent-disclosure-envelope-00.txt
   Pages:   12
   Dates:   2026-09-26

Abstract:

   This document defines the Disclosure Envelope, an out-of-band wrapper
   structure for revealing the raw content behind a digest-only Agent
   Action Capsule field to a verifier, without altering the Capsule's
   own bytes or recomputing its capsule_id.  The Capsule profile
   [I-D.mih-scitt-agent-action-capsule] commits some fields as a
   [RFC8785]-canonicalized SHA-256 digest only — the content itself is
   never carried in the signed, registered record.  The initial
   disclosable fields are
   model_attestation.compute_attestation.agent_input_digest and
   .agent_output_digest.  A Disclosure Envelope wraps an unmodified
   Capsule alongside a sibling disclosures object; a verifier recomputes
   the JSON-DIGEST of each disclosed value using the same
   canonicalization the base profile already uses for capsule_id, and
   compares it to the digest committed inside the Capsule.  This
   mechanism is distinct from the per-field selective-disclosure profile
   [I-D.mih-scitt-agent-action-capsule-selective-disclosure]: that
   mechanism conceals and later reveals whole payload fields that would
   otherwise be carried in clear; this one reveals the content behind a
   field that was always present in clear, as a digest, from the moment
   the Capsule was signed.

The IETF datatracker status page for this Internet-Draft is:
https://datatracker.ietf.org/doc/draft-mih-agent-disclosure-envelope/

There is also an HTML version available at:
https://www.ietf.org/archive/id/draft-mih-agent-disclosure-envelope-00.html

Internet-Drafts are also available by rsync at:
rsync.ietf.org::internet-drafts