I-D Action: draft-schrock-ae-challenge-02.txt

Internet-Draft draft-schrock-ae-challenge-02.txt is now available.

   Title:   An Authorization Evidence Challenge for High-Risk Agent Actions
   Author:  Iman Schrock
   Name:    draft-schrock-ae-challenge-02.txt
   Pages:   10
   Dates:   2026-08-07

Abstract:

   The agent-action evidence stack has declaration (a resource declares
   what evidence its actions require), presentation (an AEC presentation
   of signed artifacts), and decision (deterministic policy replay
   yielding a closed verdict).  Nothing closes the loop: when the
   verdict is that evidence is missing or stale, no machine-readable
   message tells the agent what to obtain, how to re-present, or what
   the retry semantics are -- every deployment hand-rolls the dance.
   This document defines the Authorization Evidence Challenge: the
   message a relying party returns before a high-risk action executes,
   naming the exact evidence still required (type, profile constraints,
   freshness bound, revocation-check requirement), how to present it,
   where it might be obtained, and the challenge's own expiry and
   single-use nonce.  The action digest in a challenge is computed by
   the RELYING PARTY over its own canonical action, so evidence is
   obtained against the action that will actually execute.  The exchange
   generalizes OAuth step-up authentication (RFC 9470) from
   authentication to evidence, and completes the circuit: declare,
   attempt, challenge, obtain, present, replay, consume.  A satisfied
   challenge yields a verdict under the relying party's policy, never a
   promise to execute.

The IETF datatracker status page for this Internet-Draft is:
https://datatracker.ietf.org/doc/draft-schrock-ae-challenge/

There is also an HTML version available at:
https://www.ietf.org/archive/id/draft-schrock-ae-challenge-02.html

A diff from the previous version is available at:
https://author-tools.ietf.org/iddiff?url2=draft-schrock-ae-challenge-02

Internet-Drafts are also available by rsync at:
rsync.ietf.org::internet-drafts


_______________________________________________
I-D-Announce mailing list -- [email protected]
To unsubscribe send an email to [email protected]