Return-Path: <wangaijun@tsinghua.org.cn>
X-Original-To: ztcpp@mail2.ietf.org
Delivered-To: ztcpp@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1])
	by mail2.ietf.org (Postfix) with ESMTP id 798E4E1863D3
	for <ztcpp@mail2.ietf.org>; Thu, 23 Apr 2026 01:47:42 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1;
	t=1776934062; bh=NZoDxgSMY3mllL7a5xtJq1lcqYygNipc3XcXJJwdr2A=;
	h=From:Subject:Date:References:Cc:In-Reply-To:To;
	b=CahNyPO00Rq7TnEbgJlT4J3LmXoz9JZOsB7ba6jA5LPIoPHgNrH6epBFs7SFXM0w5
	 MG7rfec6QLOH8Ezkwx4+xQlhq0OG2+xiVPxolWMbhJAQsSkXCXjgnwUaZBMYj3LAuV
	 E+Ern7ul5m39rIhpChycXG/HbcXmT1a34ZwW9rgg=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -1.005
X-Spam-Level: 
X-Spam-Status: No, score=-1.005 tagged_above=-999 required=5
	tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, MIME_HTML_ONLY=0.1,
	MIME_HTML_ONLY_MULTI=0.001, MIME_QP_LONG_LINE=0.001,
	MPART_ALT_DIFF=0.79, RCVD_IN_DNSWL_NONE=-0.0001,
	RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001,
	RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_HELO_NONE=0.001,
	SPF_PASS=-0.001] autolearn=no autolearn_force=no
Received: from mail2.ietf.org ([166.84.6.31])
	by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id 3zatDB9-BXR9 for <ztcpp@mail2.ietf.org>;
	Thu, 23 Apr 2026 01:47:40 -0700 (PDT)
Received: from mail-m49197.qiye.163.com (mail-m49197.qiye.163.com
 [45.254.49.197])
	(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
	 key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256)
	(No client certificate requested)
	by mail2.ietf.org (Postfix) with ESMTPS id 3577CE18623C
	for <ztcpp@ietf.org>; Thu, 23 Apr 2026 01:46:05 -0700 (PDT)
Received: from smtpclient.apple (unknown
 [IPV6:240e:404:7910:6c9:4c49:1386:c190:d88e])
	by smtp.qiye.163.com (Hmail) with ESMTP id 3bdace701;
	Thu, 23 Apr 2026 16:45:56 +0800 (GMT+08:00)
Content-Type: multipart/alternative;
 boundary=Apple-Mail-99E79ED9-C049-41C1-8EFC-8184F5C915D6
Content-Transfer-Encoding: 7bit
From: Aijun Wang <wangaijun@tsinghua.org.cn>
Mime-Version: 1.0 (1.0)
Date: Thu, 23 Apr 2026 16:45:45 +0800
Message-Id: <EB609A15-7E28-46BE-8273-B0BCE16C6129@tsinghua.org.cn>
References: 
 <CAJuQJ1FjbX+9aSBNtFxgfkWk4NoSu8bJU8FDdkz1_fR+DE712w@mail.gmail.com>
In-Reply-To: 
 <CAJuQJ1FjbX+9aSBNtFxgfkWk4NoSu8bJU8FDdkz1_fR+DE712w@mail.gmail.com>
To: Philip Griffiths <philipleonardgriffiths@gmail.com>
X-Mailer: iPhone Mail (23D8133)
X-HM-Tid: 0a9db984697f03a2kunmc445a23346972
X-HM-MType: 10
X-HM-Spam-Status: e1kfGhgUHx5ZQUpXWQgPGg8OCBgUHx5ZQUlOS1dZFg8aDwILHllBWSg2Ly
	tZV1koWUFITzdXWS1ZQUlXWQ8JGhUIEh9ZQVlCSkNJVhhKSEpJGhlDTUlLGFYeHw5VEwETFhoSFy
	QUDg9ZV1kYEgtZQVlJT0seQU9LT0FMQkpLQU0YQkFPGE9CQUpIQ01BGEpCS0EfQ0MeWVdZFhoPEh
	UdFFlBWU9LSFVCQklOSlVKS0tVSkJLQlkG
X-MailFrom: wangaijun@tsinghua.org.cn
X-Mailman-Rule-Hits: max-size
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency;
 loop; banned-address; member-moderation; nonmember-moderation; administrivia;
 implicit-dest; max-recipients; news-moderation; no-subject; digests;
 suspicious-header
Message-ID-Hash: 66Z7KNJGQAWT4KOXWRUS7PGWAOBRAPDS
X-Message-ID-Hash: 66Z7KNJGQAWT4KOXWRUS7PGWAOBRAPDS
X-Mailman-Approved-At: Thu, 23 Apr 2026 02:06:10 -0700
CC: Chris Hood <chris@nomotic.ai>, ztcpp@ietf.org
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: =?utf-8?b?W1p0Y3BwXSBSZTog44CQWlRDUFAgQ2hhcnRlciBEaXNjdXNzaW9uc+OAkVJFOiBS?=
	=?utf-8?b?ZTogW2FnZW50MmFnZW50XSBSZTog6L2s5Y+R77yaRlc6IE5ldyBOb24tV0cgTWFp?=
	=?utf-8?b?bGluZyBMaXN0OiB6dGNwcCAoWmVybyBUcnVzdCBDb250cm9sIGFuZCBQb2xpY3kg?=
	=?utf-8?b?UHJvdG9jb2wp?=
List-Id: Zero Trust Control and Policy Protocol <ztcpp.ietf.org>
Archived-At: 
 <https://mailarchive.ietf.org/arch/msg/ztcpp/xRjg4_kl0QZC85ht42ViJO-ddc4>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ztcpp>
List-Help: <mailto:ztcpp-request@ietf.org?subject=help>
List-Owner: <mailto:ztcpp-owner@ietf.org>
List-Post: <mailto:ztcpp@ietf.org>
List-Subscribe: <mailto:ztcpp-join@ietf.org>
List-Unsubscribe: <mailto:ztcpp-leave@ietf.org>


--Apple-Mail-99E79ED9-C049-41C1-8EFC-8184F5C915D6
Content-Type: text/html;
	charset=utf-8
Content-Transfer-Encoding: quoted-printable

<html class=3D"apple-mail-supports-explicit-dark-mode"><head><meta http-equi=
v=3D"content-type" content=3D"text/html; charset=3Dutf-8"></head><body dir=3D=
"auto">Hi, Philips:<div><br></div><div>Yes, you can refine the charter in th=
e GitHub directly, describe concisely the problem existing, proposed standar=
ds approaches and the expected deliverables.</div><div><br></div><div>You ca=
n expand the current charter but should keep it confine within our initial a=
im, that is, =E2=80=9Ccontrol and policy protocol for network and service se=
curity under zero trust principles=E2=80=9D.</div><div><br></div><div>The Ch=
arter is mainly used to convince other experts, invite the possible interest=
 experts and get the approval from our AD to support the forming of the form=
al WG.</div><div><br id=3D"lineBreakAtBeginningOfSignature"><div dir=3D"ltr"=
>Aijun</div><div dir=3D"ltr"><br><blockquote type=3D"cite">On Apr 23, 2026, a=
t 16:37, Philip Griffiths &lt;philipleonardgriffiths@gmail.com&gt; wrote:<br=
><br></blockquote></div><blockquote type=3D"cite"><div dir=3D"ltr">=EF=BB=BF=
<div dir=3D"ltr"><div>Morning Aijun,</div><div><br></div><div>Sure. Wrt the c=
harter, I would say its a strong starting point and&nbsp;aligns well with th=
e need for authenticated-before-connect (ABC) mechanisms and control-plane i=
nteroperability.</div><div>One area that may benefit from strengthening is e=
nsuring that<strong>&nbsp;service-based, least-privilege policy can be both e=
xpressed and reliably bound to concrete sessions and flows (Seam 4.3)</stron=
g>. Interoperable policy distribution alone (Seam 4.2) is not sufficient unl=
ess identity- and service-based intent can be enforced with verifiable fidel=
ity at runtime, rather than being diluted into coarse address-based enforcem=
ent.</div><div><br></div><div>Should I do a pull request on the GH repo??</d=
iv><div>
<p>Essentially, it would be to help to clarify that:</p>
<ul><li>
eliminating ambient reachability (Seam 4.1),
</li><li>
distributing and updating policy across enforcement points (Seam 4.2),
</li><li>
and binding policy intent to runtime sessions and flows (Seam 4.3)
</li></ul>
<p>are <strong>distinct but interdependent concerns</strong>, all required t=
o achieve consistent Zero Trust outcomes across implementations.</p>
<p>Additionally, the problem statement could more explicitly reflect the <st=
rong>operational complexity of current approaches</strong>, where secure con=
nectivity often requires coordination across infrastructure (e.g., routing, N=
AT, firewalls), governance processes, and distributed enforcement systems. T=
his complexity largely arises from the absence of interoperable mechanisms t=
o bind identity- and service-based policy directly to communication sessions=
, resulting in inconsistent enforcement and reduced agility.</p>
<p>It would also be useful to more explicitly position identity - particular=
ly <strong>non-human identity (workloads, services, devices, and agents)</st=
rong>&nbsp;- as foundational, while clarifying that the goal is <strong>inte=
roperability and composition with existing identity systems</strong> (e.g., O=
IDC, PKI, workload identity), rather than defining new identity mechanisms.<=
/p><p></p>
<p>Finally, clarifying that posture and context signals (e.g., device or wor=
kload state) are <strong>in scope at the protocol interaction level</strong>=
, even if endpoint technologies themselves are not, would help ensure that d=
ynamic trust (primarily carried via Seam 4.2 and enforced via Seam 4.3) can b=
e consistently applied across implementations.</p><p>Overall, the seam-based=
 decomposition is a strong and practical foundation. Emphasising how these e=
lements combine to enable <strong>service-level least privilege with verifia=
ble runtime enforcement (Seam 4.3)</strong> would further strengthen alignme=
nt with Zero Trust principles such as those described in NIST SP 800-207.</p=
>Regards</div><div>Philip</div></div><br><div class=3D"gmail_quote gmail_quo=
te_container"><div dir=3D"ltr" class=3D"gmail_attr">On Thu, 23 Apr 2026 at 0=
8:02, Aijun Wang &lt;<a href=3D"mailto:wangaijun@tsinghua.org.cn">wangaijun@=
tsinghua.org.cn</a>&gt; wrote:<br></div><blockquote class=3D"gmail_quote" st=
yle=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);paddi=
ng-left:1ex"><div class=3D"msg646410956056836006"><div lang=3D"ZH-CN"><div c=
lass=3D"m_646410956056836006WordSection1"><p class=3D"MsoNormal"><span lang=3D=
"EN-US" style=3D"font-family:=E7=AD=89=E7=BA=BF;color:rgb(31,73,125)">Hi, Ph=
ilip and Chris:<u></u><u></u></span></p><p class=3D"MsoNormal"><span lang=3D=
"EN-US" style=3D"font-family:=E7=AD=89=E7=BA=BF;color:rgb(31,73,125)"><u></u=
>&nbsp;<u></u></span></p><p class=3D"MsoNormal"><span lang=3D"EN-US" style=3D=
"font-family:=E7=AD=89=E7=BA=BF;color:rgb(31,73,125)">Let=E2=80=99s confine o=
ur discussions within the <a href=3D"mailto:ztcpp@ietf.org" target=3D"_blank=
">ztcpp@ietf.org</a><u></u><u></u></span></p><p class=3D"MsoNormal"><span la=
ng=3D"EN-US" style=3D"font-family:=E7=AD=89=E7=BA=BF;color:rgb(31,73,125)">C=
urrently, we would like to hear your opinions on the proposed charter: <a hr=
ef=3D"https://github.com/ietf-ztcpp/Charter/blob/main/Charter.md" target=3D"=
_blank">https://github.com/ietf-ztcpp/Charter/blob/main/Charter.md</a><u></u=
><u></u></span></p><p class=3D"MsoNormal"><span lang=3D"EN-US" style=3D"font=
-family:=E7=AD=89=E7=BA=BF;color:rgb(31,73,125)"><u></u>&nbsp;<u></u></span>=
</p><p class=3D"MsoNormal"><span lang=3D"EN-US" style=3D"font-family:=E7=AD=89=
=E7=BA=BF;color:rgb(31,73,125)">You can comments on the github directly for t=
he detail description, or give the suggested text on the mail list.<u></u><u=
></u></span></p><p class=3D"MsoNormal"><span lang=3D"EN-US" style=3D"font-fa=
mily:=E7=AD=89=E7=BA=BF;color:rgb(31,73,125)"><u></u>&nbsp;<u></u></span></p=
><p class=3D"MsoNormal"><span lang=3D"EN-US" style=3D"font-family:=E7=AD=89=E7=
=BA=BF;color:rgb(31,73,125)">Once we consensus on the Charter, we can discus=
s more on the specific proposals in detail.<u></u><u></u></span></p><p class=
=3D"MsoNormal"><span lang=3D"EN-US" style=3D"font-family:=E7=AD=89=E7=BA=BF;=
color:rgb(31,73,125)"><u></u>&nbsp;<u></u></span></p><p class=3D"MsoNormal">=
<span lang=3D"EN-US" style=3D"font-family:=E7=AD=89=E7=BA=BF;color:rgb(31,73=
,125)">The proposed charter should confine within our initial aim, and shoul=
d also consider carefully the possible deliverables.<u></u><u></u></span></p=
><p class=3D"MsoNormal"><span lang=3D"EN-US" style=3D"font-family:=E7=AD=89=E7=
=BA=BF;color:rgb(31,73,125)"><u></u>&nbsp;<u></u></span></p><p class=3D"MsoN=
ormal"><span lang=3D"EN-US" style=3D"font-family:=E7=AD=89=E7=BA=BF;color:rg=
b(31,73,125)">Aijun<u></u><u></u></span></p><p class=3D"MsoNormal"><span lan=
g=3D"EN-US" style=3D"font-family:=E7=AD=89=E7=BA=BF;color:rgb(31,73,125)"><u=
></u>&nbsp;<u></u></span></p><p class=3D"MsoNormal"><b><span lang=3D"EN-US" s=
tyle=3D"font-size:11pt;font-family:&quot;Calibri&quot;,sans-serif">From:</sp=
an></b><span lang=3D"EN-US" style=3D"font-size:11pt;font-family:&quot;Calibr=
i&quot;,sans-serif"> <a href=3D"mailto:forwardingalgorithm@ietf.org" target=3D=
"_blank">forwardingalgorithm@ietf.org</a> [mailto:<a href=3D"mailto:forwardi=
ngalgorithm@ietf.org" target=3D"_blank">forwardingalgorithm@ietf.org</a>] <b=
>On Behalf Of </b>Philip Griffiths<br><b>Sent:</b> Thursday, April 23, 2026 3=
:22 AM<br><b>To:</b> Chris Hood &lt;<a href=3D"mailto:chris@nomotic.ai" targ=
et=3D"_blank">chris@nomotic.ai</a>&gt;<br><b>Cc:</b> <a href=3D"mailto:sixua=
n23@foxmail.com" target=3D"_blank">sixuan23@foxmail.com</a>; <a href=3D"mail=
to:agent2agent@ietf.org" target=3D"_blank">agent2agent@ietf.org</a>; <a href=
=3D"mailto:ztcpp@ietf.org" target=3D"_blank">ztcpp@ietf.org</a>; <a href=3D"=
mailto:wangaijun@tsinghua.org.cn" target=3D"_blank">wangaijun@tsinghua.org.c=
n</a><br><b>Subject:</b> [Ztcpp] Re: [agent2agent] Re: </span><span style=3D=
"font-size:11pt">=E8=BD=AC=E5=8F=91=EF=BC=9A</span><span lang=3D"EN-US" styl=
e=3D"font-size:11pt;font-family:&quot;Calibri&quot;,sans-serif">FW: New Non-=
WG Mailing List: ztcpp (Zero Trust Control and Policy Protocol)<u></u><u></u=
></span></p><p class=3D"MsoNormal"><span lang=3D"EN-US"><u></u>&nbsp;<u></u>=
</span></p><div><div><p class=3D"MsoNormal"><span lang=3D"EN-US">Hey Chris,<=
u></u><u></u></span></p></div><div><p class=3D"MsoNormal"><span lang=3D"EN-U=
S"><u></u>&nbsp;<u></u></span></p></div><div><p class=3D"MsoNormal"><span la=
ng=3D"EN-US">For sure, these are the slides we pull together in the CSA, whi=
ch I presented, which Aijun and team used for protocol gap analysis of ZTCPP=
 -&nbsp;<a href=3D"https://github.com/ietf-ztcpp/125meeting/blob/main/0.4--I=
ETF%20-%20ZTCPP%20presentation(Philips-Netfoundry).pdf" target=3D"_blank">ht=
tps://github.com/ietf-ztcpp/125meeting/blob/main/0.4--IETF%20-%20ZTCPP%20pre=
sentation(Philips-Netfoundry).pdf</a>.<u></u><u></u></span></p></div><div><p=
 class=3D"MsoNormal"><span lang=3D"EN-US"><u></u>&nbsp;<u></u></span></p></d=
iv><div><p class=3D"MsoNormal"><span lang=3D"EN-US">I have also attached the=
 markdown I wrote before creating the slides.<u></u><u></u></span></p></div>=
<div><p class=3D"MsoNormal"><span lang=3D"EN-US"><u></u>&nbsp;<u></u></span>=
</p></div><div><p class=3D"MsoNormal"><span lang=3D"EN-US">Regards<u></u><u>=
</u></span></p></div><div><p class=3D"MsoNormal"><span lang=3D"EN-US">Philip=
&nbsp;<u></u><u></u></span></p></div></div><p class=3D"MsoNormal"><span lang=
=3D"EN-US"><u></u>&nbsp;<u></u></span></p><div><div><p class=3D"MsoNormal"><=
span lang=3D"EN-US">On Wed, 22 Apr 2026 at 20:00, Chris Hood &lt;<a href=3D"=
mailto:chris@nomotic.ai" target=3D"_blank">chris@nomotic.ai</a>&gt; wrote:<u=
></u><u></u></span></p></div><blockquote style=3D"border-width:medium medium=
 medium 1pt;border-style:none none none solid;border-color:currentcolor curr=
entcolor currentcolor rgb(204,204,204);padding:0cm 0cm 0cm 6pt;margin-left:4=
.8pt;margin-right:0cm"><div><p class=3D"MsoNormal"><span lang=3D"EN-US">Phil=
ip,<u></u><u></u></span></p></div><div><p class=3D"MsoNormal"><span lang=3D"=
EN-US"><u></u>&nbsp;<u></u></span></p></div><div><p class=3D"MsoNormal"><spa=
n lang=3D"EN-US">Appreciate the thoughtful engagement. Your 4.2 and 4.3 refi=
nements are genuinely clarifying.<u></u><u></u></span></p></div><div><p clas=
s=3D"MsoNormal"><span lang=3D"EN-US"><u></u>&nbsp;<u></u></span></p></div><d=
iv><p class=3D"MsoNormal"><span lang=3D"EN-US">One small reframe. AGTP is de=
signed as a governance + transport layer rather than application-layer seman=
tics. The intent is for agent-centric frameworks including MCP, A2A, ACP, an=
d governance platforms such as Nomotic to function on top of AGTP rather tha=
n alongside it, each gaining protocol-level identity, authority, and attribu=
tion natively rather than retrofitting them. It seems that ZTCPP's coordinat=
ion work sits naturally alongside those layers, ensuring coherent enforcemen=
t across heterogeneous deployments. The composition is cleaner than a head-t=
o-head comparison might suggest.<u></u><u></u></span></p></div><div><p class=
=3D"MsoNormal"><span lang=3D"EN-US"><u></u>&nbsp;<u></u></span></p></div><di=
v><p class=3D"MsoNormal"><span lang=3D"EN-US">On 4.1, your reframing is the a=
ccurate position. Both models will exist. AGTP's defaults target the open-ag=
ent-web deployment profile while providing the primitives that enterprise-or=
iented governance can build on.<u></u><u></u></span></p></div><div><p class=3D=
"MsoNormal"><span lang=3D"EN-US"><u></u>&nbsp;<u></u></span></p></div><div><=
p class=3D"MsoNormal"><span lang=3D"EN-US">I'll follow up separately with th=
e crosswalk I mentioned, mapping AGTP's binding-layer constructs (Authority-=
Scope, Governance Tokens, Delegation-Chain, 451/551, Attribution-Record, NOT=
IFY revocation) against the Seam 4.2 and 4.3 definitions. <br><br>Please sha=
re with me the current ZTCPP seam documentation when you have a moment.<u></=
u><u></u></span></p></div><div><p class=3D"MsoNormal" style=3D"margin-bottom=
:12pt"><span lang=3D"EN-US"><br>Regards,<u></u><u></u></span></p></div><div>=
<p class=3D"MsoNormal"><span lang=3D"EN-US">Chris Hood<u></u><u></u></span><=
/p></div><div><p class=3D"MsoNormal"><span lang=3D"EN-US">Nomotic, Inc.<u></=
u><u></u></span></p></div><div><p class=3D"MsoNormal"><span lang=3D"EN-US"><=
a href=3D"mailto:chris@nomotic.ai" target=3D"_blank">chris@nomotic.ai</a><u>=
</u><u></u></span></p></div><p class=3D"MsoNormal" style=3D"margin-bottom:12=
pt"><span lang=3D"EN-US"><u></u>&nbsp;<u></u></span></p><div><div><p class=3D=
"MsoNormal"><span lang=3D"EN-US">On Wed, Apr 22, 2026 at 8:09 AM Philip Grif=
fiths &lt;<a href=3D"mailto:philipleonardgriffiths@gmail.com" target=3D"_bla=
nk">philipleonardgriffiths@gmail.com</a>&gt; wrote:<u></u><u></u></span></p>=
</div><blockquote style=3D"margin-top:5pt;margin-bottom:5pt"><div><div><p cl=
ass=3D"MsoNormal"><span lang=3D"EN-US">Hey Chris,<u></u><u></u></span></p></=
div><div><p><span lang=3D"EN-US">Thisis really helpful - appreciate you shar=
ing the detail on AGTP. It was the first I heard about it so did some quick l=
earning (thus please forgive if I make any misinterpretations). My hot take i=
s there is alignment, but AGTP is not the same as what we are trying to achi=
eve with ZTCPP, so there alignment and potential collaboration points. Much a=
lignment comes around carrying identity, context, and scoped authority on ev=
ery interaction.<br><br>wrt Seams 4.2 and 4.3, I agree there is strong overl=
ap. AGTP=E2=80=99s use of Agent-ID, Principal-ID, delegation chains, and Aut=
hority-Scope is very much in line with what we=E2=80=99ve been describing as=
 binding identity and policy intent to interactions. The Authority-Scope mod=
el in particular feels like a concrete example of binding-layer semantics. O=
ne nuance I=E2=80=99d highlight (and where I think ZTCPP can complement work=
 like AGTP) is the distinction between:<u></u><u></u></span></p><ul type=3D"=
disc"><li class=3D"MsoNormal"><span lang=3D"EN-US">carrying semantics per re=
quest, and<u></u><u></u></span></li><li class=3D"MsoNormal"><span lang=3D"EN=
-US">ensuring those semantics are interpreted, enforced, and verified consis=
tently across different systems and enforcement points.<u></u><u></u></span>=
</li></ul><p><span lang=3D"EN-US">=46rom the seam perspective:<u></u><u></u>=
</span></p><ul type=3D"disc"><li class=3D"MsoNormal"><span lang=3D"EN-US">Se=
am 4.2 is less about in-band propagation of identity/context (which AGTP han=
dles well), and more about policy lifecycle and coordination across enforcem=
ent points - e.g., update, revocation, reauth, convergence, and cross-domain=
 consistency.<u></u><u></u></span></li><li class=3D"MsoNormal"><span lang=3D=
"EN-US">Seam 4.3 is where we=E2=80=99ve been focusing on ensuring that whate=
ver semantics are defined (e.g., Authority-Scope) can be reliably bound to r=
untime behaviour - not just per request, but across interactions - with cons=
istent enforcement and auditable outcomes.<u></u><u></u></span></li></ul><p>=
<span lang=3D"EN-US">In other words, from my quick understanding, AGTP makes=
 the binding layer explicit at the application level, whereas ZTCPP is tryin=
g to ensure that those semantics can be interoperably realised across implem=
entations and trust domains, including how they map to enforcement in underl=
ying systems.<br><br>On Seam 4.1, I think this is a really useful point of d=
iscussion. I completely agree that AGTP aligns with the open web model where=
 reachability precedes authorisation, and governance controls what is expose=
d. =46rom a Zero Trust perspective, the question we=E2=80=99ve been explorin=
g is whether that model continues to hold in environments where:<u></u><u></=
u></span></p><ul type=3D"disc"><li class=3D"MsoNormal"><span lang=3D"EN-US">=
agents are highly dynamic<u></u><u></u></span></li><li class=3D"MsoNormal"><=
span lang=3D"EN-US">interactions are machine-speed<u></u><u></u></span></li>=
<li class=3D"MsoNormal"><span lang=3D"EN-US">and exposure itself becomes a r=
isk surface<u></u><u></u></span></li></ul><p><span lang=3D"EN-US">So I=E2=80=
=99d frame this less as a disagreement and more as a design choice with diff=
erent assumptions:<u></u><u></u></span></p><ul type=3D"disc"><li class=3D"Ms=
oNormal"><span lang=3D"EN-US">AGTP preserves reachability-first interaction (=
web model)<u></u><u></u></span></li><li class=3D"MsoNormal"><span lang=3D"EN=
-US">ZTCPP also considers architectures where reachability itself is mediate=
d by identity and policy (which is a big request from large, enterprise orga=
nisations)<u></u><u></u></span></li></ul><p class=3D"MsoNormal"><span lang=3D=
"EN-US">I suspect both models will exist, but being explicit about the trade=
-offs feels important. More broadly, I see a strong opportunity for collabor=
ation here. AGTP can be seen as defining the application-layer semantics for=
 agent interaction (identity, intent, authority), while ZTCPP is focused on h=
ow those semantics are:<u></u><u></u></span></p><ul type=3D"disc"><li class=3D=
"MsoNormal"><span lang=3D"EN-US">distributed and updated across systems (4.2=
)<u></u><u></u></span></li><li class=3D"MsoNormal"><span lang=3D"EN-US">and e=
nforced with consistent, verifiable outcomes (4.3)<u></u><u></u></span></li>=
</ul><p class=3D"MsoNormal"><span lang=3D"EN-US">Agentic systems feel like a=
 natural driver for this work, but the same issues apply across users, servi=
ces, and workloads more broadly.<br><br>Also completely agree on the vocabul=
ary point - =E2=80=9CAuthority-Scope,=E2=80=9D =E2=80=9Cbinding layer,=E2=80=
=9D =E2=80=9Ctool authorisation,=E2=80=9D etc., are all converging on the sa=
me underlying need: consistent, enforceable semantics at the point of intera=
ction<br><br>Happy to take this offline - comparing AGTP=E2=80=99s binding-l=
ayer semantics against the Seam 4.3 definition would be very useful, especia=
lly to understand where we can converge vs where differences are intentional=
.<br><br>Best,<br>Philip<u></u><u></u></span></p></div></div><p class=3D"Mso=
Normal"><span lang=3D"EN-US"><u></u>&nbsp;<u></u></span></p><div><div><p cla=
ss=3D"MsoNormal"><span lang=3D"EN-US">On Wed, 22 Apr 2026 at 15:10, Chris Ho=
od &lt;<a href=3D"mailto:chris@nomotic.ai" target=3D"_blank">chris@nomotic.a=
i</a>&gt; wrote:<u></u><u></u></span></p></div><blockquote style=3D"border-w=
idth:medium medium medium 1pt;border-style:none none none solid;border-color=
:currentcolor currentcolor currentcolor rgb(204,204,204);padding:0cm 0cm 0cm=
 6pt;margin-left:4.8pt;margin-right:0cm"><div><p class=3D"MsoNormal"><span l=
ang=3D"EN-US">Philip, Xuan, others -<u></u><u></u></span></p></div><div><p c=
lass=3D"MsoNormal"><span lang=3D"EN-US"><u></u>&nbsp;<u></u></span></p></div=
><div><p class=3D"MsoNormal"><span lang=3D"EN-US">Appreciate the framing for=
 your charter. Much of this maps closely to Agent Transfer Protocol, AGTP (d=
raft-hood-independent-agtp). I wanted to share some context for your conside=
ration as it relates specifically to agents and zero-trust. A few points of a=
lignment and one considered disagreement.<u></u><u></u></span></p></div><div=
><p class=3D"MsoNormal"><span lang=3D"EN-US"><u></u>&nbsp;<u></u></span></p>=
</div><div><p class=3D"MsoNormal"><span lang=3D"EN-US">On Seams 4.2 and 4.3:=
 AGTP carries identity, context, and authorization on every request through A=
gent-ID, Principal-ID, and Authority-Scope headers, with a three-level verif=
ication model (self-asserted, application-layer, transport-layer) covering d=
ifferent deployment profiles. The Authority-Scope vocabulary is AGTP's bindi=
ng-layer common semantics, tokens like `documents:query`, `booking:*`, `paym=
ents:confirm` enforced on every request. The AGTP-CERT extension binds scope=
 cryptographically for O(1) per-request enforcement at infrastructure layers=
. Delegation chains are strict-subset-constrained and recorded per hop. 451 S=
cope Violation and 551 Authority Chain Broken are first-class status codes.<=
u></u><u></u></span></p></div><div><p class=3D"MsoNormal"><span lang=3D"EN-U=
S"><u></u>&nbsp;<u></u></span></p></div><div><p class=3D"MsoNormal"><span la=
ng=3D"EN-US">On Seam 4.1: respectful disagreement. Agents should be reachabl=
e and discoverable prior to authorization, the same way websites are, with t=
he governance platform controlling what's exposed and organizations able to h=
ide agents when they choose to. AGTP's ANS gates discovery queries with Auth=
ority-Scope, but reachability itself is not the gatekeeper. Pre-authorizatio=
n reachability is how the open web works and I think it's the right default f=
or the open agent web too.<u></u><u></u></span></p></div><div><p class=3D"Ms=
oNormal"><span lang=3D"EN-US"><u></u>&nbsp;<u></u></span></p></div><div><p c=
lass=3D"MsoNormal"><span lang=3D"EN-US">In the broader context, AGTP was des=
igned as a governance + application layer, with the goal of moving agent tra=
ffic off HTTP so it's easier to observe, authenticate, and govern at the pro=
tocol level. One place AGTP differs from the autonomy-constraints framing is=
 that AGTP doesn't define autonomy directly, because the systems aren't auto=
nomous in the strong sense, they act on behalf of principals within scope gr=
ants. Authority-Scope and archetypes (assistant, analyst, executor, orchestr=
ator, monitor) bound the action space.<u></u><u></u></span></p></div><div><p=
 class=3D"MsoNormal"><span lang=3D"EN-US"><u></u>&nbsp;<u></u></span></p></d=
iv><div><p class=3D"MsoNormal"><span lang=3D"EN-US">Where I find a genuine o=
pportunity is in the vocabulary. AGTP uses "Authority-Scope," "governance zo=
ne," "trust tier." CSA uses "seam," "binding layer," and "verifiable enforce=
ment." ONUG uses "autonomy constraints," and "tool authorisation." Different=
 traditions, largely overlapping concerns. Happy to take this offline to com=
pare AGTP's binding-layer semantics against the Seam 4.3 definition if that'=
s useful.<u></u><u></u></span></p></div><div><p class=3D"MsoNormal"><span la=
ng=3D"EN-US"><u></u>&nbsp;<u></u></span></p></div><div><p class=3D"MsoNormal=
"><span lang=3D"EN-US">Chris Hood<u></u><u></u></span></p></div><div><p clas=
s=3D"MsoNormal"><span lang=3D"EN-US">Nomotic, Inc.<u></u><u></u></span></p><=
/div><div><p class=3D"MsoNormal"><span lang=3D"EN-US"><a href=3D"mailto:chri=
s@nomotic.ai" target=3D"_blank">chris@nomotic.ai</a><u></u><u></u></span></p=
></div><div><p class=3D"MsoNormal"><span lang=3D"EN-US"><u></u>&nbsp;<u></u>=
</span></p></div><div><p class=3D"MsoNormal"><span lang=3D"EN-US"><u></u>&nb=
sp;<u></u></span></p></div><div><div><p class=3D"MsoNormal"><span lang=3D"EN=
-US">On Wed, Apr 22, 2026 at 4:57 AM Philip Griffiths &lt;<a href=3D"mailto:=
philipleonardgriffiths@gmail.com" target=3D"_blank">philipleonardgriffiths@g=
mail.com</a>&gt; wrote:<u></u><u></u></span></p></div><blockquote style=3D"m=
argin-top:5pt;margin-bottom:5pt"><div><div><p class=3D"MsoNormal"><span lang=
=3D"EN-US">Hey all,<u></u><u></u></span></p></div><div><p class=3D"MsoNormal=
"><span lang=3D"EN-US"><u></u>&nbsp;<u></u></span></p></div><div><div><p cla=
ss=3D"MsoNormal"><span lang=3D"EN-US">Thanks Xuan. I have some feedback on t=
he charter, should I just reply in this thread??&nbsp;<u></u><u></u></span><=
/p></div></div><div><p class=3D"MsoNormal"><span lang=3D"EN-US">I also agree=
&nbsp;AI Agent communication should be done under the guise of zero trust pr=
inciples. Mapping to the protocol gap work we created in the CSA, which I re=
motely presented, as well as the talk I gave earlier this month at the DoW Z=
ero Trust Symposium on AI in collab with the CSA, wrt agentic systems, the t=
raditional =E2=80=9Cnever trust, always verify=E2=80=9D model needs to exten=
d beyond identity verification (particularly for non-human identities such a=
s agents, services, and workloads) into how decisions are<i>&nbsp;bound to r=
untime interactions.</i><u></u><u></u></span></p></div><div><p><span lang=3D=
"EN-US">In particular, agent-to-agent communication highlights three distinc=
t but interdependent concerns:<u></u><u></u></span></p><ul type=3D"disc"><li=
 class=3D"MsoNormal"><b><span lang=3D"EN-US">Eliminating ambient reachabilit=
y (Seam 4.1)</span></b><span lang=3D"EN-US">&nbsp;- agents should not be dis=
coverable or reachable prior to authorisation<u></u><u></u></span></li><li c=
lass=3D"MsoNormal"><b><span lang=3D"EN-US">Distributing and updating dynamic=
 trust decisions (Seam 4.2)</span></b><span lang=3D"EN-US">&nbsp;- including=
 identity, context, and authorisation policies across systems<u></u><u></u><=
/span></li><li class=3D"MsoNormal"><b><span lang=3D"EN-US">Binding policy in=
tent to concrete interactions (Seam 4.3)</span></b><span lang=3D"EN-US">&nbs=
p;- ensuring that each agent-to-agent exchange is constrained to least-privi=
lege semantics and can be verified at runtime<u></u><u></u></span></li></ul>=
<p><span lang=3D"EN-US">The last point becomes especially important in agent=
ic environments. Agents are not just establishing connections - they are exe=
cuting multi-step workflows, invoking tools, and passing context across doma=
ins. It is not sufficient to authenticate the agent; we must ensure that eac=
h interaction is explicitly authorised, scoped, and enforced at the session o=
r operation level.<u></u><u></u></span></p><blockquote style=3D"margin-top:5=
pt;margin-bottom:5pt"><p class=3D"MsoNormal"><span lang=3D"EN-US"><u></u>&nb=
sp;<u></u></span></p></blockquote><p><span lang=3D"EN-US">Without common sem=
antics for this binding layer (Seam 4.3), we risk systems where identity is v=
erified, and policy is distributed, but interactions remain over-broad or di=
fficult to audit.<u></u><u></u></span></p><p><span lang=3D"EN-US">This maps v=
ery closely to some work thats taking place in ONUG on 'AOMC' (AI <b>A</b>ge=
nt<b> O</b>perations and<b> M</b>anagement<b> Control </b>framework), where Z=
ero Trust begins to intersect with <b>agent governance</b>. Controls such as=
 identity attestation, tool authorisation, and autonomy constraints require t=
hat policy is not only distributed (Seam 4.2), but <b>consistently enforced a=
t the point of action</b> (Seam 4.3).<u></u><u></u></span></p><p><span lang=3D=
"EN-US">This suggests that agentic communication may be a strong driver for Z=
TCPP work around:<u></u><u></u></span></p><ul type=3D"disc"><li class=3D"Mso=
Normal"><span lang=3D"EN-US">standardising how identity (incl. non-human) an=
d service intent are bound to interactions<u></u><u></u></span></li><li clas=
s=3D"MsoNormal"><span lang=3D"EN-US">defining verifiable enforcement semanti=
cs for agent-to-agent exchanges<u></u><u></u></span></li><li class=3D"MsoNor=
mal"><span lang=3D"EN-US">ensuring interoperability across different agent f=
rameworks and trust domains<u></u><u></u></span></li></ul><div><p class=3D"M=
soNormal"><span lang=3D"EN-US">Happy to share more detail or examples if use=
ful - this feels like a natural extension of the current seam-based work.<u>=
</u><u></u></span></p></div><div><p class=3D"MsoNormal"><span lang=3D"EN-US"=
><u></u>&nbsp;<u></u></span></p></div><div><p class=3D"MsoNormal"><span lang=
=3D"EN-US">Regards<u></u><u></u></span></p></div><div><p class=3D"MsoNormal"=
><span lang=3D"EN-US">Philip<u></u><u></u></span></p></div></div></div><div>=
<p class=3D"MsoNormal"><span lang=3D"EN-US"><u></u>&nbsp;<u></u></span></p><=
/div><div><div><p class=3D"MsoNormal"><span lang=3D"EN-US">On Wed, 22 Apr 20=
26 at 11:42, Xuan Si &lt;<a href=3D"mailto:sixuan23@foxmail.com" target=3D"_=
blank">sixuan23@foxmail.com</a>&gt; wrote:<u></u><u></u></span></p></div><bl=
ockquote style=3D"border-width:medium medium medium 1pt;border-style:none no=
ne none solid;border-color:currentcolor currentcolor currentcolor rgb(204,20=
4,204);padding:0cm 0cm 0cm 6pt;margin-left:4.8pt;margin-right:0cm"><p class=3D=
"MsoNormal"><span lang=3D"EN-US" style=3D"color:black">Hi All,<u></u><u></u>=
</span></p><p class=3D"MsoNormal"><span lang=3D"EN-US" style=3D"color:black"=
><u></u>&nbsp;<u></u></span></p><div><p class=3D"MsoNormal"><span lang=3D"EN=
-US" style=3D"color:black">I=E2=80=99m forwarding the announcement that the <=
a href=3D"mailto:ztcpp@ietf.org" target=3D"_blank">ztcpp@ietf.org</a> (Zero&=
nbsp;Trust&nbsp;Control&nbsp;and&nbsp;Policy&nbsp;Protocol)</span><span lang=
=3D"EN-US" style=3D"font-size:10.5pt;font-family:&quot;system-ui&quot;,serif=
;color:black">&nbsp;</span><span lang=3D"EN-US" style=3D"color:black">mailin=
g list has been established:<u></u><u></u></span></p></div><div><p class=3D"=
MsoNormal"><span lang=3D"EN-US" style=3D"color:black"><a href=3D"https://mai=
lman3.ietf.org/mailman3/lists/ztcpp.ietf.org/" target=3D"_blank">https://mai=
lman3.ietf.org/mailman3/lists/ztcpp.ietf.org/</a><u></u><u></u></span></p></=
div><p class=3D"MsoNormal"><span lang=3D"EN-US" style=3D"color:black">This m=
ail list will serve as a&nbsp;platform for us to exchange ideas, discuss tec=
hnical issues and promote related research collaboration in the field of AI A=
gent and network security.<u></u><u></u></span></p><p class=3D"MsoNormal"><s=
pan lang=3D"EN-US" style=3D"color:black"><u></u>&nbsp;<u></u></span></p><div=
><p class=3D"MsoNormal"><span lang=3D"EN-US" style=3D"color:black">Our curre=
nt Charter is available here:<u></u><u></u></span></p></div><div><p class=3D=
"MsoNormal"><span lang=3D"EN-US" style=3D"color:black"><a href=3D"https://gi=
thub.com/ietf-ztcpp/Charter/blob/main/Charter.md" target=3D"_blank">https://=
github.com/ietf-ztcpp/Charter/blob/main/Charter.md</a><u></u><u></u></span><=
/p></div><p class=3D"MsoNormal"><span lang=3D"EN-US" style=3D"color:black"><=
u></u>&nbsp;<u></u></span></p><p class=3D"MsoNormal"><span lang=3D"EN-US" st=
yle=3D"color:black">One of our core research areas is <b>reviewing AI Agent c=
ommunication security under zero-trust principles</b>. As agent-to-agent int=
eraction grows, zero-trust models including =E2=80=9Cnever trust, always ver=
ify=E2=80=9D are critical to building secure and trusted communication envir=
onments.<u></u><u></u></span></p><div><p class=3D"MsoNormal"><span lang=3D"E=
N-US" style=3D"color:black"><u></u>&nbsp;<u></u></span></p></div><div><p cla=
ss=3D"MsoNormal"><span lang=3D"EN-US" style=3D"color:black">We welcome every=
one to submit proposals and share views on AI Agent security and zero-trust a=
pplications.<u></u><u></u></span></p></div><div><p class=3D"MsoNormal"><span=
 lang=3D"EN-US" style=3D"color:black"><u></u>&nbsp;<u></u></span></p></div><=
div><p class=3D"MsoNormal"><span lang=3D"EN-US" style=3D"color:black">We als=
o plan to <b>hold a BoF or side meetings at IETF 126</b>&nbsp;for in-depth f=
ace-to-face discussions.<u></u><u></u></span></p></div><div><p class=3D"MsoN=
ormal"><span lang=3D"EN-US" style=3D"color:black">Please feel free to commen=
t on the current Charter =E2=80=94 your feedback will help us refine scope a=
nd direction.<u></u><u></u></span></p></div><div><p class=3D"MsoNormal"><spa=
n lang=3D"EN-US" style=3D"color:black"><u></u>&nbsp;<u></u></span></p></div>=
<div><p class=3D"MsoNormal"><span lang=3D"EN-US" style=3D"color:black">Looki=
ng forward to your active participation.<u></u><u></u></span></p></div><div>=
<p class=3D"MsoNormal"><span lang=3D"EN-US" style=3D"color:black"><u></u>&nb=
sp;<u></u></span></p></div><p class=3D"MsoNormal"><span lang=3D"EN-US" style=
=3D"color:black">Best regards,<u></u><u></u></span></p><div><p class=3D"MsoN=
ormal"><span lang=3D"EN-US" style=3D"font-size:10.5pt;font-family:&quot;syst=
em-ui&quot;,serif;color:black">Xuan Si<u></u><u></u></span></p></div><div><p=
 class=3D"MsoNormal"><span lang=3D"EN-US"><u></u>&nbsp;<u></u></span></p></d=
iv><div><div><p class=3D"MsoNormal" style=3D"line-height:22.5pt"><span style=
=3D"font-size:9pt;color:rgb(149,157,166)">=E5=8E=9F=E5=A7=8B=E9=82=AE=E4=BB=B6=
<span lang=3D"EN-US"><u></u><u></u></span></span></p></div><div><div class=3D=
"MsoNormal" align=3D"center" style=3D"text-align:center"><span lang=3D"EN-US=
"><hr size=3D"3" width=3D"100%" align=3D"center"></span></div><p class=3D"Ms=
oNormal"><span lang=3D"EN-US"><u></u>&nbsp;<u></u></span></p></div></div><ta=
ble border=3D"0" cellspacing=3D"3" cellpadding=3D"0" width=3D"100%" style=3D=
"width:100%;border-radius:6px;background-color:rgba(20,46,77,0.05)"><tbody><=
tr><td style=3D"padding:6pt"><div><p class=3D"MsoNormal" style=3D"line-heigh=
t:15pt"><span style=3D"font-size:9pt;color:rgb(92,97,102)">=E5=8F=91=E4=BB=B6=
=E4=BA=BA=EF=BC=9A</span><span lang=3D"EN-US" style=3D"font-size:9pt;color:b=
lack">Aijun Wang</span><span lang=3D"EN-US" style=3D"font-size:9pt"> <span s=
tyle=3D"color:rgb(149,157,166)">&lt;<a href=3D"mailto:wangaijun@tsinghua.org=
.cn" target=3D"_blank">wangaijun@tsinghua.org.cn</a>&gt;</span><u></u><u></u=
></span></p></div><div><p class=3D"MsoNormal" style=3D"line-height:15pt"><sp=
an style=3D"font-size:9pt;color:rgb(92,97,102)">=E5=8F=91=E4=BB=B6=E6=97=B6=E9=
=97=B4=EF=BC=9A</span><span lang=3D"EN-US" style=3D"font-size:9pt;color:blac=
k">2026</span><span style=3D"font-size:9pt;color:black">=E5=B9=B4<span lang=3D=
"EN-US">4</span>=E6=9C=88<span lang=3D"EN-US">20</span>=E6=97=A5<span lang=3D=
"EN-US"> 18:31</span></span><span lang=3D"EN-US" style=3D"font-size:9pt"><u>=
</u><u></u></span></p></div><div><p class=3D"MsoNormal" style=3D"line-height=
:15pt"><span style=3D"font-size:9pt;color:rgb(92,97,102)">=E6=94=B6=E4=BB=B6=
=E4=BA=BA=EF=BC=9A</span><span lang=3D"EN-US" style=3D"font-size:9pt;color:b=
lack">saag</span><span lang=3D"EN-US" style=3D"font-size:9pt"> <span style=3D=
"color:rgb(149,157,166)">&lt;<a href=3D"mailto:saag@ietf.org" target=3D"_bla=
nk">saag@ietf.org</a>&gt;</span><u></u><u></u></span></p></div><div><p class=
=3D"MsoNormal" style=3D"line-height:15pt"><span style=3D"font-size:9pt;color=
:rgb(92,97,102)">=E6=8A=84=E9=80=81=EF=BC=9A</span><span lang=3D"EN-US" styl=
e=3D"font-size:9pt;color:black">ztcpp</span><span lang=3D"EN-US" style=3D"fo=
nt-size:9pt"> <span style=3D"color:rgb(149,157,166)">&lt;<a href=3D"mailto:z=
tcpp@ietf.org" target=3D"_blank">ztcpp@ietf.org</a>&gt;</span><u></u><u></u>=
</span></p></div><div><p class=3D"MsoNormal" style=3D"line-height:15pt"><spa=
n style=3D"font-size:9pt;color:rgb(92,97,102)">=E4=B8=BB=E9=A2=98=EF=BC=9A</=
span><span lang=3D"EN-US" style=3D"font-size:9pt;color:black">[Ztcpp] FW: Ne=
w Non-WG Mailing List: ztcpp (Zero Trust Control and Policy Protocol)</span>=
<span lang=3D"EN-US" style=3D"font-size:9pt"><u></u><u></u></span></p></div>=
</td></tr></tbody></table><div><p class=3D"MsoNormal"><span lang=3D"EN-US"><=
u></u>&nbsp;<u></u></span></p></div><div><p class=3D"MsoNormal"><span lang=3D=
"EN-US">Hi, All&nbsp;SAAG&nbsp;experts:<u></u><u></u></span></p></div><div><=
p class=3D"MsoNormal"><span lang=3D"EN-US"><u></u>&nbsp;<u></u></span></p></=
div><div><p class=3D"MsoNormal"><span lang=3D"EN-US">If&nbsp;you&nbsp;are&nb=
sp;interested&nbsp;this&nbsp;direction,&nbsp;please&nbsp;subscribe&nbsp;the&=
nbsp;mail&nbsp;list(<a href=3D"https://mailman3.ietf.org/mailman3/lists/ztcp=
p.ietf.org/" target=3D"_blank">https://mailman3.ietf.org/mailman3/lists/ztcp=
p.ietf.org/</a>)&nbsp;and&nbsp;propose&nbsp;your&nbsp;related&nbsp;drafts.<u=
></u><u></u></span></p></div><div><p class=3D"MsoNormal"><span lang=3D"EN-US=
"><u></u>&nbsp;<u></u></span></p></div><div><p class=3D"MsoNormal"><span lan=
g=3D"EN-US">We&nbsp;also&nbsp;welcome&nbsp;you&nbsp;to&nbsp;review&nbsp;the&=
nbsp;ZTCPP&nbsp;charter&nbsp;(<a href=3D"https://github.com/ietf-ztcpp/Chart=
er/blob/main/Charter.md" target=3D"_blank">https://github.com/ietf-ztcpp/Cha=
rter/blob/main/Charter.md</a>)&nbsp;and&nbsp;give&nbsp;your&nbsp;suggestions=
&nbsp;within&nbsp;the&nbsp;<a href=3D"mailto:ztcpp@ietf.org" target=3D"_blan=
k">ztcpp@ietf.org</a>&nbsp;mail&nbsp;list.<u></u><u></u></span></p></div><di=
v><p class=3D"MsoNormal"><span lang=3D"EN-US"><u></u>&nbsp;<u></u></span></p=
></div><div><p class=3D"MsoNormal"><span lang=3D"EN-US">The&nbsp;materials&n=
bsp;for&nbsp;the&nbsp;past&nbsp;IETF&nbsp;125&nbsp;ZTCPP&nbsp;side&nbsp;meet=
ing&nbsp;can&nbsp;be&nbsp;accessed&nbsp;at&nbsp;<a href=3D"https://github.co=
m/ietf-ztcpp/125meeting" target=3D"_blank">https://github.com/ietf-ztcpp/125=
meeting</a>&nbsp;(include&nbsp;problem&nbsp;statements,&nbsp;gap&nbsp;analys=
is,&nbsp;and&nbsp;brief&nbsp;of&nbsp;introduction&nbsp;of&nbsp;CSA&nbsp;alli=
ance).<u></u><u></u></span></p></div><div><p class=3D"MsoNormal"><span lang=3D=
"EN-US"><u></u>&nbsp;<u></u></span></p></div><div><p class=3D"MsoNormal"><sp=
an lang=3D"EN-US">We&nbsp;are&nbsp;planning&nbsp;the&nbsp;IETF&nbsp;126&nbsp=
;BoF(or&nbsp;side&nbsp;meeting),&nbsp;welcome&nbsp;you&nbsp;all&nbsp;interes=
ted&nbsp;to&nbsp;join&nbsp;us&nbsp;together!<u></u><u></u></span></p></div><=
div><p class=3D"MsoNormal"><span lang=3D"EN-US"><u></u>&nbsp;<u></u></span><=
/p></div><div><p class=3D"MsoNormal"><span lang=3D"EN-US">Aijun<u></u><u></u=
></span></p></div><div><p class=3D"MsoNormal"><span lang=3D"EN-US"><u></u>&n=
bsp;<u></u></span></p></div><div><p class=3D"MsoNormal"><span lang=3D"EN-US"=
><u></u>&nbsp;<u></u></span></p></div><div><p class=3D"MsoNormal"><span lang=
=3D"EN-US"><u></u>&nbsp;<u></u></span></p></div><div><p class=3D"MsoNormal">=
<span lang=3D"EN-US">-----Original&nbsp;Message-----<u></u><u></u></span></p=
></div><div><p class=3D"MsoNormal"><span lang=3D"EN-US">From:&nbsp;<a href=3D=
"mailto:forwardingalgorithm@ietf.org" target=3D"_blank">forwardingalgorithm@=
ietf.org</a>&nbsp;[mailto:<a href=3D"mailto:forwardingalgorithm@ietf.org" ta=
rget=3D"_blank">forwardingalgorithm@ietf.org</a>]&nbsp;On&nbsp;Behalf&nbsp;O=
f&nbsp;IETF&nbsp;Secretariat<u></u><u></u></span></p></div><div><p class=3D"=
MsoNormal"><span lang=3D"EN-US">Sent:&nbsp;Saturday,&nbsp;April&nbsp;18,&nbs=
p;2026&nbsp;1:13&nbsp;AM<u></u><u></u></span></p></div><div><p class=3D"MsoN=
ormal"><span lang=3D"EN-US">To:&nbsp;IETF&nbsp;Announcement&nbsp;List&nbsp;&=
lt;<a href=3D"mailto:ietf-announce@ietf.org" target=3D"_blank">ietf-announce=
@ietf.org</a>&gt;<u></u><u></u></span></p></div><div><p class=3D"MsoNormal">=
<span lang=3D"EN-US">Cc:&nbsp;<a href=3D"mailto:wangaj3@chinatelecom.cn" tar=
get=3D"_blank">wangaj3@chinatelecom.cn</a>;&nbsp;<a href=3D"mailto:ejohnson@=
cloudsecurityalliance.org" target=3D"_blank">ejohnson@cloudsecurityalliance.=
org</a>;&nbsp;<a href=3D"mailto:stndrds-inacio@andrew.cmu.edu" target=3D"_bl=
ank">stndrds-inacio@andrew.cmu.edu</a>;&nbsp;<a href=3D"mailto:ztcpp@ietf.or=
g" target=3D"_blank">ztcpp@ietf.org</a><u></u><u></u></span></p></div><div><=
p class=3D"MsoNormal"><span lang=3D"EN-US">Subject:&nbsp;New&nbsp;Non-WG&nbs=
p;Mailing&nbsp;List:&nbsp;ztcpp&nbsp;(Zero&nbsp;Trust&nbsp;Control&nbsp;and&=
nbsp;Policy&nbsp;Protocol)<u></u><u></u></span></p></div><div><p class=3D"Ms=
oNormal"><span lang=3D"EN-US"><u></u>&nbsp;<u></u></span></p></div><div><p c=
lass=3D"MsoNormal"><span lang=3D"EN-US">A&nbsp;new&nbsp;IETF&nbsp;non-workin=
g&nbsp;group&nbsp;email&nbsp;list&nbsp;has&nbsp;been&nbsp;created.<u></u><u>=
</u></span></p></div><div><p class=3D"MsoNormal"><span lang=3D"EN-US"><u></u=
>&nbsp;<u></u></span></p></div><div><p class=3D"MsoNormal"><span lang=3D"EN-=
US">List&nbsp;address:&nbsp;<a href=3D"mailto:ztcpp@ietf.org" target=3D"_bla=
nk">ztcpp@ietf.org</a><u></u><u></u></span></p></div><div><p class=3D"MsoNor=
mal"><span lang=3D"EN-US">Archive:&nbsp;<a href=3D"https://mailarchive.ietf.=
org/arch/browse/ztcpp/" target=3D"_blank">https://mailarchive.ietf.org/arch/=
browse/ztcpp/</a><u></u><u></u></span></p></div><div><p class=3D"MsoNormal">=
<span lang=3D"EN-US">To&nbsp;subscribe:&nbsp;<a href=3D"https://mailman3.iet=
f.org/mailman3/lists/ztcpp.ietf.org/" target=3D"_blank">https://mailman3.iet=
f.org/mailman3/lists/ztcpp.ietf.org/</a><u></u><u></u></span></p></div><div>=
<p class=3D"MsoNormal"><span lang=3D"EN-US"><u></u>&nbsp;<u></u></span></p><=
/div><div><p class=3D"MsoNormal"><span lang=3D"EN-US">Purpose:&nbsp;This&nbs=
p;email&nbsp;list&nbsp;focuses&nbsp;on&nbsp;exploring&nbsp;the&nbsp;practice=
&nbsp;and&nbsp;development&nbsp;of&nbsp;zero-trust&nbsp;strategies&nbsp;in&n=
bsp;modern&nbsp;multi-cloud&nbsp;and&nbsp;network&nbsp;environments,&nbsp;wi=
th&nbsp;a&nbsp;focus&nbsp;on&nbsp;zero&nbsp;trust's&nbsp;core&nbsp;principle=
s,&nbsp;key&nbsp;elements,&nbsp;and&nbsp;specific&nbsp;application&nbsp;scen=
arios,&nbsp;control&nbsp;and&nbsp;policy&nbsp;protocol&nbsp;etc.&nbsp;<u></u=
><u></u></span></p></div><div><p class=3D"MsoNormal"><span lang=3D"EN-US"><u=
></u>&nbsp;<u></u></span></p></div><div><p class=3D"MsoNormal"><span lang=3D=
"EN-US">The&nbsp;goal&nbsp;is&nbsp;to&nbsp;jointly&nbsp;advance&nbsp;underst=
anding&nbsp;and&nbsp;practice&nbsp;of&nbsp;zero&nbsp;trust&nbsp;in&nbsp;clou=
d&nbsp;and&nbsp;networks,&nbsp;pool&nbsp;industry&nbsp;insights,&nbsp;explor=
e&nbsp;better&nbsp;security&nbsp;strategies,&nbsp;and&nbsp;develop&nbsp;rela=
ted&nbsp;communication&nbsp;standards.<u></u><u></u></span></p></div><div><p=
 class=3D"MsoNormal"><span lang=3D"EN-US"><u></u>&nbsp;<u></u></span></p></d=
iv><div><p class=3D"MsoNormal"><span lang=3D"EN-US">This&nbsp;list&nbsp;belo=
ngs&nbsp;to&nbsp;IETF&nbsp;area:&nbsp;SEC<u></u><u></u></span></p></div><div=
><p class=3D"MsoNormal"><span lang=3D"EN-US"><u></u>&nbsp;<u></u></span></p>=
</div><div><p class=3D"MsoNormal"><span lang=3D"EN-US">For&nbsp;additional&n=
bsp;information,&nbsp;please&nbsp;contact&nbsp;the&nbsp;list&nbsp;administra=
tors.<u></u><u></u></span></p></div><div><p class=3D"MsoNormal"><span lang=3D=
"EN-US"><u></u>&nbsp;<u></u></span></p></div><div><p class=3D"MsoNormal"><sp=
an lang=3D"EN-US">_______________________________________________<u></u><u><=
/u></span></p></div><div><p class=3D"MsoNormal"><span lang=3D"EN-US">IETF-An=
nounce&nbsp;mailing&nbsp;list&nbsp;--&nbsp;<a href=3D"mailto:ietf-announce@i=
etf.org" target=3D"_blank">ietf-announce@ietf.org</a>&nbsp;To&nbsp;unsubscri=
be&nbsp;send&nbsp;an&nbsp;email&nbsp;to&nbsp;<a href=3D"mailto:ietf-announce=
-leave@ietf.org" target=3D"_blank">ietf-announce-leave@ietf.org</a><u></u><u=
></u></span></p></div><div><p class=3D"MsoNormal"><span lang=3D"EN-US"><u></=
u>&nbsp;<u></u></span></p></div><div><p class=3D"MsoNormal"><span lang=3D"EN=
-US">_______________________________________________<u></u><u></u></span></p=
></div><div><p class=3D"MsoNormal"><span lang=3D"EN-US">Ztcpp&nbsp;mailing&n=
bsp;list&nbsp;--&nbsp;<a href=3D"mailto:ztcpp@ietf.org" target=3D"_blank">zt=
cpp@ietf.org</a><u></u><u></u></span></p></div><div><p class=3D"MsoNormal"><=
span lang=3D"EN-US">To&nbsp;unsubscribe&nbsp;send&nbsp;an&nbsp;email&nbsp;to=
&nbsp;<a href=3D"mailto:ztcpp-leave@ietf.org" target=3D"_blank">ztcpp-leave@=
ietf.org</a><u></u><u></u></span></p></div><div><p class=3D"MsoNormal"><span=
 lang=3D"EN-US"><u></u>&nbsp;<u></u></span></p></div><div><p class=3D"MsoNor=
mal"><span lang=3D"EN-US">_______________________________________________<u>=
</u><u></u></span></p></div><div><p class=3D"MsoNormal"><span lang=3D"EN-US"=
>Ztcpp mailing list -- <a href=3D"mailto:ztcpp@ietf.org" target=3D"_blank">z=
tcpp@ietf.org</a><u></u><u></u></span></p></div><div><p class=3D"MsoNormal">=
<span lang=3D"EN-US">To unsubscribe send an email to <a href=3D"mailto:ztcpp=
-leave@ietf.org" target=3D"_blank">ztcpp-leave@ietf.org</a><u></u><u></u></s=
pan></p></div></blockquote></div></blockquote></div><div><p class=3D"MsoNorm=
al"><span lang=3D"EN-US"><u></u>&nbsp;<u></u></span></p></div></blockquote><=
/div></blockquote></div></blockquote></div></div></div>_____________________=
__________________________<br>
Ztcpp mailing list -- <a href=3D"mailto:ztcpp@ietf.org" target=3D"_blank">zt=
cpp@ietf.org</a><br>
To unsubscribe send an email to <a href=3D"mailto:ztcpp-leave@ietf.org" targ=
et=3D"_blank">ztcpp-leave@ietf.org</a><br>
</div></blockquote></div>
</div></blockquote></div></body></html>=

--Apple-Mail-99E79ED9-C049-41C1-8EFC-8184F5C915D6--

