I-D Action: draft-kroehl-agentic-trust-aae-02.txt

internet-drafts@ietf.org Sun, 06 September 2026 15:30 UTC

MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 8bit
From: internet-drafts@ietf.org
To: i-d-announce@ietf.org
Subject: I-D Action: draft-kroehl-agentic-trust-aae-02.txt
Auto-Submitted: auto-generated
Precedence: bulk
Message-ID: <178870862044.481551.11832111246666982838@dt-datatracker-9769b79f-xztnc>
Date: Sun, 06 Sep 2026 08:30:20 -0700
Message-ID-Hash: IVJQ4A3U6T4UHUAWYUGNCGEDWWFQ7KWZ
Reply-To: internet-drafts@ietf.org
Archived-At: <https://mailarchive.ietf.org/arch/msg/i-d-announce/qz7jyjVtYLst3VKCBFiBnntE_pc>

Internet-Draft draft-kroehl-agentic-trust-aae-02.txt is now available.

   Title:   Agent Authorization Envelope (AAE): A Machine-Evaluable Authorization Structure for Autonomous AI Agents
   Author:  Lars Kersten Kroehl
   Name:    draft-kroehl-agentic-trust-aae-02.txt
   Pages:   54
   Dates:   2026-09-06

Abstract:

   Autonomous AI agents now operate at production scale across
   financial, commercial, and infrastructure domains — executing
   transactions, invoking APIs, and taking consequential actions without
   direct human oversight at each step.  Existing authorization
   mechanisms (OAuth 2.0, API keys, ACLs) were designed for human-
   initiated requests and do not capture the machine-evaluable semantics
   required for autonomous agent authorization: what the agent is
   mandated to do, what constraints bound its actions, and for how long
   the authorization is valid.

   This document specifies the Agent Authorization Envelope (AAE), a
   structured authorization container for autonomous AI agents.  AAE
   defines three mandatory blocks — MANDATE, CONSTRAINTS, and VALIDITY —
   that together constitute a machine-evaluable, cryptographically
   verifiable authorization assertion.  AAE is designed to be protocol-
   agnostic, binding to W3C Decentralized Identifiers (DIDs) for agent
   identity and W3C Verifiable Credentials (VCs) for issuance and
   signature, and is independent of any specific AI framework, transport
   protocol, or blockchain.

The IETF datatracker status page for this Internet-Draft is:
https://datatracker.ietf.org/doc/draft-kroehl-agentic-trust-aae/

There is also an HTMLized version available at:
https://datatracker.ietf.org/doc/html/draft-kroehl-agentic-trust-aae-02

A diff from the previous version is available at:
https://author-tools.ietf.org/iddiff?url2=draft-kroehl-agentic-trust-aae-02

Internet-Drafts are also available by rsync at:
rsync.ietf.org::internet-drafts

I-D Action: draft-kroehl-agentic-trust-aae-02.txt internet-drafts