I-D Action: draft-kestura-pac-compliance-attestation-00.txt

Internet-Draft draft-kestura-pac-compliance-attestation-00.txt is now
available.

   Title:   An Interoperable Attestation Format for Policy-as-Code Compliance Evidence
   Author:  Elias Lenz
   Name:    draft-kestura-pac-compliance-attestation-00.txt
   Pages:   6
   Dates:   2026-08-07

Abstract:

   Organizations increasingly enforce regulatory and security
   requirements using policy-as-code (PaC) engines integrated into
   continuous integration and delivery (CI/CD) pipelines.  The evidence
   these engines produce, that is, the record of which policies were
   evaluated, against what inputs, and with what outcome, is typically
   emitted in vendor-specific, non-portable formats.  This impairs
   auditability, cross-tool aggregation, and independent verification.
   This document analyzes the problem and describes an interoperable,
   machine-readable attestation format for PaC compliance evidence.  It
   is informational and does not define an IETF standard, nor does it
   establish a new IANA registry.

The IETF datatracker status page for this Internet-Draft is:
https://datatracker.ietf.org/doc/draft-kestura-pac-compliance-attestation/

There is also an HTMLized version available at:
https://datatracker.ietf.org/doc/html/draft-kestura-pac-compliance-attestation-00

Internet-Drafts are also available by rsync at:
rsync.ietf.org::internet-drafts


_______________________________________________
I-D-Announce mailing list -- [email protected]
To unsubscribe send an email to [email protected]