IETF Logo Mail Archive

[OAUTH-WG] Re: New I-D: Problem statement on verifiable human mandates for autonomous agent actions

Kieran Sweeney <kieran@kierans.net> Thu, 03 September 2026 15:01 UTC

Return-Path: <kieran@kierans.net>
X-Original-To: oauth@mail2.ietf.org
Delivered-To: oauth@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id A5D20134D39CA for <oauth@mail2.ietf.org>; Thu, 3 Sep 2026 08:01:47 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1788447707; bh=h55oVSKTiOVnv4cJj5TRfXqw8slK5E5o8dXObocRubE=; h=From:Date:Subject:To:Cc; b=RsbChNrD4XANocqqqubqdBLLhKxfYSiZpCLF/9juaVk5V1BXLSatufmSy0sX+P66Q ZApdKMqePoit/vSBdkBX965yMJ6qfn0rRmlPi0loEv5KAzvlofnrCMvFdHRQ7cx5sG jywp+GRleVYwiZoy3+BhKiOoX3NnEMjSwaUzX8u8=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.099
X-Spam-Level:
X-Spam-Status: No, score=-2.099 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=kierans.net
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id eZe-wxZlV7aA for <oauth@mail2.ietf.org>; Thu, 3 Sep 2026 08:01:47 -0700 (PDT)
Received: from mail-qv1-xf2f.google.com (mail-qv1-xf2f.google.com [IPv6:2607:f8b0:4864:20::f2f]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 44611134D39B5 for <oauth@ietf.org>; Thu, 3 Sep 2026 08:01:47 -0700 (PDT)
Received: by mail-qv1-xf2f.google.com with SMTP id 6a1803df08f44-90cd96389efso29160336d6.3 for <oauth@ietf.org>; Thu, 03 Sep 2026 08:01:47 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1788447707; cv=none; d=google.com; s=arc-20260327; b=kKxuHK5BbnOozMrvj3pLNkPfY6hK9Z0wQsl7tfPFZC+B2sa86pkRRsjvd7U/3q/m+C efHUecx/gk0G/w4fovBKaovjqulSu8hD6fw0bm/NFI5Ju4YAvilj98tWuQKyO2bjruv6 6liNb7VdcePS7Kja6e0rsCq5suB+Khfwkl8Yl4jfnY+h360dJnEUPSpPIiSFa2ibEkKZ Bg9WymghcoyVtEF9AXZzw1MTHKz/q2yg/OEahvEcaAdgVz8W6o4Yy8Bv4jk71O3WmMIe XmCVQBJBWkZClY5g/p4/CqTjNONObvm12RX2BGBilWOSSQuyTg/BT61BELePzWHnvGB+ gC+A==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=cc:to:subject:message-id:date:from:mime-version:dkim-signature; bh=h55oVSKTiOVnv4cJj5TRfXqw8slK5E5o8dXObocRubE=; fh=HB5+9yKVQ06uzRBo+3mtD8ljWPrDlXFG4qePpSw683k=; b=M4WqDV9OiBMcEDv9ivuBtrvppkIzMr91eikLm8N/ZABvGU9VCwKDwYFhRQ6O9y3vCA F36XEw6LTHWG79NC/AEdmToC940LmP35kHbv4jyFm2pqRjWFomHPPjk5vbjrWkTxih5U /sU8Jzu99ArRX3iY+D4Dt/QFB/cVa78b35TXtdAG51QMTA8r6tmitu+F2WFIOehDFcaT k2vLzYuWq0OxUmBKeIJeGsrqEdXL2eMFelShoYQ1l54QeB2NHr3e6w+FJUE05Y05VxNl TdSeKCpurmvFv0SVdJJcci0C8cB40e274vDfJhAsdGyLxptySvn7rBkl1RRPGxJQtiY9 pqhg==; darn=ietf.org
ARC-Authentication-Results: i=1; mx.google.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=kierans.net; s=google; t=1788447707; x=1789052507; darn=ietf.org; h=content-type:cc:to:subject:message-id:date:from:mime-version:from :to:cc:subject:date:message-id:reply-to:content-type; bh=h55oVSKTiOVnv4cJj5TRfXqw8slK5E5o8dXObocRubE=; b=KFqFwqzfaWJJZBmMwMtRwMAxEzw5BV/FGPKu32E6mso5B6JRetzdCzTsecybRLHQTD COgJEmkZ5JQaECQFYuXf5sMGiCG/oY1GTcGrKp4oKAqplaPFB4EpGrEVk1MrOGoFiNMf ZrJbYJkKbZ8u8NMd3kcVuBXCmquHiSGSPujNzKGCXbKhcUiGoyRWfZPJRYqXUXFVpPh/ 9fc+olnJc17q6W0v8vzouRd7EvADdoiZrvZpkttFkBfOwUzqro7kyDe7I8JF/kQ0/hPe PDCYw9sHFpSmEqTWet2CU6jsGGeRnb+CopwPfKkQqQuzVuKcjtCX9P5lKcqoVCA8R/Uc Z5YA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1788447707; x=1789052507; h=content-type:cc:to:subject:message-id:date:from:mime-version :x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to:content-type; bh=h55oVSKTiOVnv4cJj5TRfXqw8slK5E5o8dXObocRubE=; b=MyUBO5/SJtTOW4FuyKLpRmwmcQqizpIZcXmIOcvq7miO7gXaERDHhDSpYdp22ke5yU G9jegmRqnfiNjwqre/LngX+QfQXNrjAL9OuG2lyOHhfksRxHLepff4kd6F37bwwEaXXi yNIvSh2MvOzzcuuKOkUzoU1cGYU1fMhketsBkoATCo2L4F6KXW/e3PlTsI5oH82yZlCV SGrjZwappgT7TLqHo3ljpm+Y+cdrKrIEN4L0pcV295MYQhYzwCchPf6Qv1SwW26f0LzO nhjToeM1kb64fHSR7rNDN7Nv1FkEbwqN/r4EMbtgVI2iYB/ebv7PA5jbzNJN+ZW+KyVQ 5Dgw==
X-Gm-Message-State: AFuF++kBw1lUOUdAPmXIcmAB5vWB7EE8H/AZa3727iLN0B5FAM3yDPLy bj7m+Rqz4lFqqpwmaNMeCL6ZnMsJ8LIzMEOkdYxJB7AdPKNO6u2Xnqktu/kT4FAy7udkDeHSqe2 bLDc8PANonmBOClzRJXOo6JIJz2CjwH6yrHtfWjW+UAxDWob1c9VCaaQ=
X-Gm-Gg: AYBFou2SeP3xLf546fQWFJIXz/LXt7I92Aj4qyumGIKuUcVhI51hdxjnAqEpzhHIJ+Y qA1RT7P4YPNtSLz85zYXSzSTEugbCJj3ty+EoQ0SF8e2k6Vlo4bGuzfB8rMneIP8d33h7getIs+ 8PfIR/h+omxJkJO16CZu7JXc6SYCTaJLO7V0/qb2O75AuQMQVO/gwtRFowBWIhRO/uf0woYOT4A 8YD4rPrp18WuDOESm8iS04HYT+EuJPdOAyiXMkQ9XoeXFz3CjK7O7Wp3VkRvjl0YGvcNWKqDrv8 er5b9dod81qUWLVAvoynjdOy5NgZJfEJsgQk+wOQUkzE/uFi0e89cOgh1k0s3kmax1KOIzcXqda 71D3JcrxFJWkZNg/yrZdaiB0lBhA4heL9Gv74bZyVpRwY64ZckWFpLPQE6Q==
X-Received: by 2002:a05:620a:a417:20b0:939:1976:8309 with SMTP id af79cd13be357-93960cae6d5mr1261834885a.4.1788447706492; Thu, 03 Sep 2026 08:01:46 -0700 (PDT)
Received: from 101988054943 named unknown by gmailapi.google.com with HTTPREST; Thu, 3 Sep 2026 15:01:45 +0000
Received: from 101988054943 named unknown by gmailapi.google.com with HTTPREST; Thu, 3 Sep 2026 15:01:45 +0000
MIME-Version: 1.0
From: Kieran Sweeney <kieran@kierans.net>
Date: Thu, 03 Sep 2026 15:01:45 +0000
X-Gm-Features: AcwNN1VQSOkU2nz1bULkVohc__L2EWQbzyZlD_vREICztal89Chep-djp5HfGF4
Message-ID: <CALnUWkrw11DUVkUD=93XEbk-OFesW53+fP26gLJ2MdZTGWzv5g@mail.gmail.com>
To: oauth@ietf.org
Content-Type: multipart/alternative; boundary="0000000000003ec558065a956e84"
Message-ID-Hash: VD25LKTAUQYZ3GCRWD2QWWEDVVDH4BLV
X-Message-ID-Hash: VD25LKTAUQYZ3GCRWD2QWWEDVVDH4BLV
X-MailFrom: kieran@kierans.net
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-oauth.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: morganLR@proton.me
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [OAUTH-WG] Re: New I-D: Problem statement on verifiable human mandates for autonomous agent actions
List-Id: OAUTH WG <oauth.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/uBaWSiOckbsiwb3uj8S_CsgoVjs>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Owner: <mailto:oauth-owner@ietf.org>
List-Post: <mailto:oauth@ietf.org>
List-Subscribe: <mailto:oauth-join@ietf.org>
List-Unsubscribe: <mailto:oauth-leave@ietf.org>

Support for landing Morgan's four requirements in -01, the
narrowing-across-delegation one above all. REQ-5's transport and framework
neutrality plus provable narrowing at every hop are together what let
independent verifiers and independent implementations interoperate without
sharing a runtime, and the running-code cross-checks in this thread are the
evidence the requirements are stated at the right level.

Kieran Sweeney

v2.46.0 | Report a Bug | By Email | System Status