[Ztcpp] Re: [saag] ZTNP / ZTIP – attestation-gated authorization & intent-bound delegation (seeking venue guidance)

[Philip Griffiths <[e-mail]>]

Hey all,

Thanks for sharing @jake, I will quick add too, ZTNP/ZTIP look
complementary to the ZTCPP discussion rather than overlapping entirely (if
my quick reading of the drafts is correct).

I read it that ZTNP/ZTIP focus on how posture, attestation, intent, and
delegation evidence can inform authorization decisions at the
session/application layer.

ZTCPP, is more focused on the control/policy protocol gaps needed to
enforce least-privilege connectivity itself: authenticate-before-connect,
minimizing pre-auth reachability/exposure, and binding policy decisions to
concrete sessions/flows.

So I’d be interested in exploring whether ZTNP/ZTIP could provide inputs or
claims into a ZTCPP-style policy/enforcement model, while ZTCPP addresses
how those decisions are distributed and enforced at the connectivity layer.
Regards
Philip

On Tue, 28 Apr 2026 at 03:08, Aijun Wang <[e-mail]> wrote:

> Hi, Jake:
>
>
>
> I think your work is aligned well with the aim of ZTPP(Zero Trust Control
> and Policy Protocol) efforts.
>
> And, we are now updating the charter(
> https://github.com/ietf-ztcpp/Charter/blob/main/Charter.md) for the
> future BoF/Side Meeting in IETF 126.
>
>
>
> If you are interested, please subscribe the mailing list at
> https://mailman3.ietf.org/mailman3/lists/ztcpp.ietf.org/ and contribute
> your thoughts to refine the charter?
>
>
>
> Aijun
>
>
>
> *From:* [e-mail] [mailto:[e-mail]]
> *On Behalf Of *Jake Miller
> *Sent:* Tuesday, April 28, 2026 6:50 AM
> *To:* [e-mail]; [e-mail]
> *Subject:* [saag] ZTNP / ZTIP – attestation-gated authorization &
> intent-bound delegation (seeking venue guidance)
>
>
>
> Hello,
>
> I’ve recently submitted two individual Internet-Drafts that explore gaps
> we’re encountering as systems become more agent-driven and involve
> multi-hop delegation:
>
> ZTNP (Zero-Trust Negotiation Protocol)
> https://datatracker.ietf.org/doc/draft-miller-ztnp/
>
> ZTIP (Zero-Trust Intent Protocol)
> https://datatracker.ietf.org/doc/draft-miller-ztip/
>
> At a high level:
>
>    - *ZTNP* looks at how to bind attestation (or posture) to
>    authorization at session establishment, including channel binding and local
>    policy evaluation by the relying party.
>    - *ZTIP* explores how to bind authorization to structured user intent
>    across delegation chains, with explicit scope monotonicity and end-to-end
>    verifiability.
>
> The drafts explore a potential gap between:
>
>    - attestation (e.g., RATS-style evidence/results), and
>    - authorization mechanisms (OAuth / GNAP)
>
> This is particularly true in scenarios where actions are delegated across
> multiple agents and are susceptible to prompt injection or confused deputy
> patterns.
>
> These drafts are intended as early contributions. I’m interested in
> critical feedback, especially on:
>
>    - whether the problem framing resonates
>    - how this relates to existing work in OAuth, GNAP, and RATS
>    - and whether there is an appropriate venue (existing WG or otherwise)
>    for further discussion
>
> Thank you for any feedback or direction.
>
> Best regards,
> Jake Miller
> [e-mail]
> _______________________________________________
> Ztcpp mailing list -- [e-mail]
> To unsubscribe send an email to [e-mail]
>