I-D Action: draft-morrison-ot-command-authority-01.txt

Internet-Draft draft-morrison-ot-command-authority-01.txt is now available.

   Title:   Consented and Attributable Agent Authority for Operational-Technology Control Actions
   Author:  Blake Morrison
   Name:    draft-morrison-ot-command-authority-01.txt
   Pages:   14
   Dates:   2026-07-22

Abstract:

   This memo specifies a binding profile by which a control action
   issued to an operational-technology (OT) or industrial control system
   on the authority of a software agent is refused unless it carries a
   verifiable statement of who the agent is, which human principal it
   acts for, whether that principal consented to this specific action on
   this specific asset, whether a human authorised the action where the
   action's risk class requires it, and an append-only record sufficient
   to attribute the action afterward.  The profile does not invent new
   cryptography or a new identity mechanism.  It composes primitives
   defined elsewhere, DNSSEC-rooted agent discovery, scoped and
   revocable consent, a human-in-the-loop binding moment, and a
   provenance-labelled audit record, into a single structure, the
   Command Authority Envelope, that an OT conduit evaluates and, on any
   missing or invalid binding, refuses.  The profile is availability-
   first and fails closed on authority, never on safety: it MUST NOT be
   placed in the trip path of a safety function.  The memo maps the
   profile onto the identification, use-control, and audit requirements
   that [IEC62443] and [NERCCIP] state but do not give a wire mechanism
   for.  The methods by which a principal's identity is inferred are out
   of scope by construction.

The IETF datatracker status page for this Internet-Draft is:
https://datatracker.ietf.org/doc/draft-morrison-ot-command-authority/

There is also an HTMLized version available at:
https://datatracker.ietf.org/doc/html/draft-morrison-ot-command-authority-01

A diff from the previous version is available at:
https://author-tools.ietf.org/iddiff?url2=draft-morrison-ot-command-authority-01

Internet-Drafts are also available by rsync at:
rsync.ietf.org::internet-drafts


_______________________________________________
I-D-Announce mailing list -- [email protected]
To unsubscribe send an email to [email protected]