[WIMSE] Adoption of AI Agent Authentication and Authorization (AIMS)
Justin Richer <jricher@MIT.EDU> Wed, 09 September 2026 16:56 UTC
Return-Path: <jricher@MIT.EDU>
X-Original-To: wimse@mail2.ietf.org
Delivered-To: wimse@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 9292B137CA9C9 for <wimse@mail2.ietf.org>; Wed, 9 Sep 2026 09:56:45 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1788973005; bh=FgV13ITszJnGEUPlxZKo5bB30cEiI5LNPXXKcvbevRc=; h=From:To:Subject:Date; b=uat5QTxOfqd+2oSnTSYsXGQfmPJEgYaCM1LKXR216m9is3dBblh1zzynBuSxDPx0l sfra9QKS6M7Uvsv3W4eceX+bF+rtp14OFPf1+TsOiU6E+0sflTQuAQK2mLfLOqRnfE 3bV9mML+8c7Lh5CQNqr8yQq315+4BT0t4j/v21hY=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.095
X-Spam-Level:
X-Spam-Status: No, score=-2.095 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, RCVD_IN_VALIDITY_SAFE_BLOCKED=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (1024-bit key) header.d=mit.edu
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ht8UpeiW60ZJ for <wimse@mail2.ietf.org>; Wed, 9 Sep 2026 09:56:44 -0700 (PDT)
Received: from BL2PR02CU003.outbound.protection.outlook.com (mail-eastusazon11021128.outbound.protection.outlook.com [52.101.52.128]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-384) server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id D07DF137CA9C2 for <wimse@ietf.org>; Wed, 9 Sep 2026 09:56:44 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=XzFh4hsrzHqaSkeAMUnitoBp4EegwSDEKSRV+E6m14Buz6G9PhLBXBqZ8U9KpGO4aDIIPonLRaGv2BC4SW8h61nznyvECclEu1pp0Ao7yWNsXsewAT/k7k22iNjKNcN4YTxDGXFD8ihvStgIsxgq+Ky8hn5Nnq5zYPxXW4SWxQQgeH9zf/563EtEKdlQ12KyXOqF+SFlMQGokQbc3gdH+jGzHTX1aVNT7h0j6A1wvxJBKhkCQg8tKySW1tXLn9pD4IEZl3M2bqQ67GHtmZF5KQL63NMQcvHSXEcA6Ivko8BqmJ9juZ0zJb++wVZjBEAXLA5moQNRiNoFZF2IUQauxA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=FgV13ITszJnGEUPlxZKo5bB30cEiI5LNPXXKcvbevRc=; b=ngqQvma3gLSFlUTTWeXotzUNwJztuBDirSOX5gCqJeFFfbeF/DwD9dkr7BR+1oVD7RPXtKVFGK+jCZXpsx2JcY5a2rLDd14aOUP2j7Jf6StZAgLz9KjJVOjoyVghHGyzG6PMNPMeWsKUm03IfXFMqyIdwNDLAnzV90vYfWULEf0SQ4B6zgyqPFsoWClENk5hxL58gUR7LsOdBr76sU1sBlQIt9ZdI6ebk2BWpTsRR0ZZ/3efNMDKmEwxIhpHoHFQdz2xVTqhGUczAJ2ppIF0tLaBlIPpq9pbdVSsSb8l9+zB7UepcKd3H+k4ICVSHummyUA6aRtxPnikPP7yQwyEpg==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=mit.edu; dmarc=pass action=none header.from=mit.edu; dkim=pass header.d=mit.edu; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mit.edu; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=FgV13ITszJnGEUPlxZKo5bB30cEiI5LNPXXKcvbevRc=; b=KMSemNb6/gqYiIu577I/SVLyE/jTgQcP/NaxkeIFKIj+UZqVn1xDxAkSHEBfeDDL6uQ0HWUTIQuj4zQsWXxMkp0tRY4Bzf5ndRjMmN+agvwZ3dV/1ADqe+bZ5uC5bhFEIPILrsbdZjMPUhx2hAM9yMzGsv5XON61YUTTR4Z4HXA=
Received: from IA0PR01MB8277.prod.exchangelabs.com (2603:10b6:208:48e::13) by SA0PR01MB6410.prod.exchangelabs.com (2603:10b6:806:e5::20) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.406.7; Wed, 9 Sep 2026 16:56:37 +0000
Received: from IA0PR01MB8277.prod.exchangelabs.com ([fe80::7f95:e055:a3eb:82d0]) by IA0PR01MB8277.prod.exchangelabs.com ([fe80::7f95:e055:a3eb:82d0%6]) with mapi id 15.21.0406.007; Wed, 9 Sep 2026 16:56:37 +0000
From: Justin Richer <jricher@MIT.EDU>
To: "wimse@ietf.org" <wimse@ietf.org>
Thread-Topic: Adoption of AI Agent Authentication and Authorization (AIMS)
Thread-Index: AQHdQHwt1jRZQZh4y0Wic8J9riaYRw==
Date: Wed, 09 Sep 2026 16:56:37 +0000
Message-ID: <314C445F-A258-4BCC-AE84-618673A27562@mit.edu>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=MIT.EDU;
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: IA0PR01MB8277:EE_|SA0PR01MB6410:EE_
x-ms-office365-filtering-correlation-id: 124c9d2c-b212-4944-48e0-08df0e93501e
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;ARA:13230040|23010399003|1800799024|376014|786006|366016|56012099006|11063799006|8096899003|38070700021|10067099003|13003099007|18002099003;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:IA0PR01MB8277.prod.exchangelabs.com;PTR:;CAT:NONE;SFS:(13230040)(23010399003)(1800799024)(376014)(786006)(366016)(56012099006)(11063799006)(8096899003)(38070700021)(10067099003)(13003099007)(18002099003);DIR:OUT;SFP:1102;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: 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
Content-Type: multipart/alternative; boundary="_000_314C445FA2584BCCAE84618673A27562mitedu_"
MIME-Version: 1.0
X-OriginatorOrg: mit.edu
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: IA0PR01MB8277.prod.exchangelabs.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 124c9d2c-b212-4944-48e0-08df0e93501e
X-MS-Exchange-CrossTenant-originalarrivaltime: 09 Sep 2026 16:56:37.6705 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 64afd9ba-0ecf-4acf-bc36-935f6235ba8b
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: g8VeozROh9A65ftLrj+xMKn3+3kk/Op6ppm7VbvbLumBkzioAg9gLbfTdqc6uXFq
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SA0PR01MB6410
Message-ID-Hash: KQL3HQX4BIQLONYTIV24JD36G6WCKW67
X-Message-ID-Hash: KQL3HQX4BIQLONYTIV24JD36G6WCKW67
X-MailFrom: jricher@MIT.EDU
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [WIMSE] Adoption of AI Agent Authentication and Authorization (AIMS)
List-Id: WIMSE Workload Identity in Multi-Service Environment <wimse.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/wimse/ipoTMCLvV79Q3gJ1vP3lFtStDiI>
List-Archive: <https://mailarchive.ietf.org/arch/browse/wimse>
List-Help: <mailto:wimse-request@ietf.org?subject=help>
List-Owner: <mailto:wimse-owner@ietf.org>
List-Post: <mailto:wimse@ietf.org>
List-Subscribe: <mailto:wimse-join@ietf.org>
List-Unsubscribe: <mailto:wimse-leave@ietf.org>
WIMSE Entusiasts, The document draft-klrc-aiagent-auth (https://datatracker.ietf.org/doc/draft-klrc-aiagent-auth/) has been adopted as a working group item for WIMSE. Thank you to everyone for your enthusiastic debate and review. A reminder to all, the text of this document is not sacred: it is a starting point for us to dig in and do the work to solve the problems. If you expressed dissent during the call for adoption because the document did not cover or structure things how you think it should, this is now your chance to improve the document. Authors: please transfer your GitHub repository to the ietf-wg-wimse organization (https://github.com/ietf-wg-wimse/) and rename both the repository and the document accordingly. I might need to add all of the authors to the organization as contributors so please message me (directly, off-list) with everyone’s GitHub account name. Please publish a -00 version with the same content as the latest I-D. Also, please be prepared to present at the next IETF meeting in San Francisco. Note well: for purposes of this document, I am the sole responsible chair, and Pieter has recused himself from all chairing responsibilities for this document. Thanks, — Justin
- [WIMSE] Adoption of AI Agent Authentication and A… Justin Richer