I-D Action: draft-schrock-ae-challenge-03.txt
[email protected] Sat, 08 Aug 2026 01:08:36 -0700
| Newsgroups | gmane.ietf.announce |
|---|---|
| Message-ID | <178617651675.146879.9152500955654901841@dt-datatracker-559c48c7fb-llb9x> |
Internet-Draft draft-schrock-ae-challenge-03.txt is now available. Title: An Authorization Evidence Challenge for High-Risk Agent Actions Author: Iman Schrock Name: draft-schrock-ae-challenge-03.txt Pages: 13 Dates: 2026-08-08 Abstract: When a relying party refuses a consequential agent action because authorization evidence is missing, stale, or unverifiable, the agent needs a machine-readable description of what remains necessary. This document defines a transport-neutral Authorization Evidence Challenge data model bound to the relying party's exact action. The challenge identifies outstanding evidence requirements, freshness and status constraints, acceptable presentation profiles, and retry state. It authorizes nothing, transfers no admission ownership, and provides no promise that a later request will execute. The document also defines an HTTP binding using 403 Forbidden and RFC 9457 Problem Details, and describes an informative gateway-handoff profile for DMSC-style federation. The gateway profile communicates evidence requirements; it does not solve conserved admission or double-admission across independently operated gateways. The IETF datatracker status page for this Internet-Draft is: https://datatracker.ietf.org/doc/draft-schrock-ae-challenge/ There is also an HTML version available at: https://www.ietf.org/archive/id/draft-schrock-ae-challenge-03.html A diff from the previous version is available at: https://author-tools.ietf.org/iddiff?url2=draft-schrock-ae-challenge-03 Internet-Drafts are also available by rsync at: rsync.ietf.org::internet-drafts _______________________________________________ I-D-Announce mailing list -- [email protected] To unsubscribe send an email to [email protected]