I-D Action: draft-schrock-ep-authorization-receipts-08.txt
| Newsgroups | gmane.ietf.announce |
|---|---|
| Message-ID | <178467931963.366735.815689786058121192@dt-datatracker-d4d6ff9d9-fsx7d> |
Internet-Draft draft-schrock-ep-authorization-receipts-08.txt is now available. Title: Authorization Receipts for High-Risk Agent Actions Author: Iman Schrock Name: draft-schrock-ep-authorization-receipts-08.txt Pages: 36 Dates: 2026-07-21 Abstract: This document defines the EMILIA Protocol (EP) authorization receipt, an evidence artifact binding an enrolled approver key to one canonical action before execution. An approver-held key signs an Authorization Context containing the action hash, policy reference, nonce, audience, and validity window. A Trust Receipt carries the signed contexts, terminal consumption record, and Merkle inclusion material so a relying party can verify the recorded event offline under independently selected log, directory, policy, and approver trust inputs. The receipt establishes only the guarantees of the selected verification profile. The mapping from an enrolled approver identifier to a natural person is asserted by the directory authority. Offline verification does not establish current revocation status, global non-replay, comprehension, legality, safety, or execution. Replay prevention requires an online atomic consumption store at the executor. The state-machine invariants are machine-checked under the assumptions stated in this document. The IETF datatracker status page for this Internet-Draft is: https://datatracker.ietf.org/doc/draft-schrock-ep-authorization-receipts/ There is also an HTML version available at: https://www.ietf.org/archive/id/draft-schrock-ep-authorization-receipts-08.html A diff from the previous version is available at: https://author-tools.ietf.org/iddiff?url2=draft-schrock-ep-authorization-receipts-08 Internet-Drafts are also available by rsync at: rsync.ietf.org::internet-drafts _______________________________________________ I-D-Announce mailing list -- [email protected] To unsubscribe send an email to [email protected]