I-D Action: draft-ruvalcaba-nhe-authz-00.txt

Internet-Draft draft-ruvalcaba-nhe-authz-00.txt is now available.

   Title:   NHE Backchannel Authorization: Graduated Autonomy and Intent-Scoped Credentials for Autonomous Agent Actions
   Author:  Cristian Xavier Ruvalcaba
   Name:    draft-ruvalcaba-nhe-authz-00.txt
   Pages:   7
   Dates:   2026-08-13

Abstract:

   This document specifies how a consequential action attempted by a
   Non-Human Entity (NHE) is authorized at the time it is attempted.  A
   security runtime transparently intercepts an entity's outbound
   action, so the entity holds no standing credentials, and classifies
   it under graduated autonomy as autonomous, supervised, or denied.  A
   supervised action triggers a backchannel approval flow that presents
   a human approver with a human-readable rendering of the exact
   operation; on approval the runtime issues an intent-scoped, single-
   use, short-lived credential cryptographically bound to that specific
   action, which an enforcement point verifies against the operation
   actually being forwarded.  The same canonical parameter digest scopes
   the credential and appears in the human-facing description, so the
   approver provably authorizes exactly what the credential permits.
   The flow and credential data model are specified here; the wire
   encoding is deferred to the next revision.

The IETF datatracker status page for this Internet-Draft is:
https://datatracker.ietf.org/doc/draft-ruvalcaba-nhe-authz/

There is also an HTML version available at:
https://www.ietf.org/archive/id/draft-ruvalcaba-nhe-authz-00.html

Internet-Drafts are also available by rsync at:
rsync.ietf.org::internet-drafts


_______________________________________________
I-D-Announce mailing list -- [email protected]
To unsubscribe send an email to [email protected]