[OAUTH-WG] Re: New I-D: Problem statement on verifiable human mandates for autonomous agent actions

[[e-mail]]

I would highly recommend looking at Karl McGuinness’s mission bound authorization work as it addresses this problem space.

https://github.com/mcguinness/mission-bound-authorization" dir="ltr" role="button" width="300">

https://github.com/mcguinness/mission-bound-authorization">mcguinness/mission-bound-authorization https://github.com/mcguinness/mission-bound-authorization">github.com https://github.com/mcguinness/mission-bound-authorization">

--

George Fletcher

Practical Identity LLC

On Jul 22, 2026, at 2:32 PM, Mohamad Khalil Yossif <mohamad=[e-mail]> wrote:

Hi all,

I have submitted draft-yossif-agent-mandate-problem-00, a short
problem statement. No protocol, no mechanism.

The problem: a human authorizes intent at T0, an autonomous agent
executes a specific parameterized action at T1, and nothing
cryptographically binds the executed parameters to the constraints
the human actually signed. OAuth scopes are static and session-bound,
audit logs are self-asserted after the fact, and existing
mandate-style work is payments-scoped. The draft states the gap and
the requirements any general solution would need to meet.

https://datatracker.ietf.org/doc/draft-yossif-agent-mandate-problem/

Given the WG charter now covers authorization for automated agents,
I would welcome feedback on the problem definition itself: is it
stated at the right level, and is anything missing from the
requirements?

Mohamad Khalil Yossif

_______________________________________________
OAuth mailing list -- [e-mail]
To unsubscribe send an email to [e-mail]