I-D Action: draft-schrock-ae-challenge-04.txt

Internet-Draft draft-schrock-ae-challenge-04.txt is now available.

   Title:   An Authorization Evidence Challenge for High-Risk Agent Actions
   Author:  Iman Schrock
   Name:    draft-schrock-ae-challenge-04.txt
   Pages:   16
   Dates:   2026-08-09

Abstract:

   When a relying party refuses a consequential agent action because
   authorization evidence is missing, stale, or unverifiable, the agent
   needs a machine-readable description of what remains necessary.  This
   document defines a transport-neutral Authorization Evidence Challenge
   data model bound to the relying party's exact action.  The challenge
   identifies outstanding evidence requirements, freshness and status
   constraints, acceptable presentation profiles, and retry state.  It
   authorizes nothing, transfers no admission ownership, and provides no
   promise that a later request will execute.

   The document also defines an HTTP binding using 403 Forbidden and RFC
   9457 Problem Details, and describes an informative gateway-handoff
   profile for DMSC-style federation.  The gateway profile communicates
   evidence requirements; it does not solve conserved admission or
   double-admission across independently operated gateways.

   A challenge can synchronize corrected retries and amplify load.  The
   core therefore defines optional retry timing with per-challenge
   jitter, and the HTTP binding maps its lower bound to Retry-After.
   Retry timing controls presentation attempts only; it does not
   authorize the action or make an uncertain action safe to repeat.

The IETF datatracker status page for this Internet-Draft is:
https://datatracker.ietf.org/doc/draft-schrock-ae-challenge/

There is also an HTML version available at:
https://www.ietf.org/archive/id/draft-schrock-ae-challenge-04.html

A diff from the previous version is available at:
https://author-tools.ietf.org/iddiff?url2=draft-schrock-ae-challenge-04

Internet-Drafts are also available by rsync at:
rsync.ietf.org::internet-drafts


_______________________________________________
I-D-Announce mailing list -- [email protected]
To unsubscribe send an email to [email protected]