Internet-Draft draft-sharif-agent-audit-trail-01.txt is now available.
Title: Agent Audit Trail: A Standard Logging Format for Autonomous AI Systems
Author: Raza Sharif
Name: draft-sharif-agent-audit-trail-01.txt
Pages: 38
Dates: 2026-08-19
Abstract:
This document specifies a standard logging format for autonomous
AI agent systems. The Agent Audit Trail (AAT) defines a
JSON-based record structure with mandatory fields for agent
identity, action classification, outcome tracking, and trust
level reporting. Records are linked via tamper-evident hash
chaining using SHA-256 per RFC 8785, with optional ECDSA
signatures for non-repudiation.
The format addresses requirements from the EU AI Act
(Regulation 2024/1689), which mandates automatic recording of
events for high-risk AI systems effective August 2026. It also
maps to SOC 2 Trust Services Criteria, ISO/IEC 42001,
ISO/IEC 24970, prEN 18229-1, and PCI DSS v4.0.1 logging
requirements.
The design is transport-agnostic and supports export to JSONL,
Syslog (RFC 5424), and CSV while preserving chain integrity.
Privacy is addressed through input/output hashing, content
fingerprinting, and tombstone-based deletion compatible with
GDPR Article 17.
This revision (-01) adds pre-execution recording requirements,
recording independence, deny reason codes, replay protection,
external timestamp anchoring, and content fingerprinting based
on feedback from independent implementers.
The IETF datatracker status page for this Internet-Draft is:
https://datatracker.ietf.org/doc/draft-sharif-agent-audit-trail/
There is also an HTMLized version available at:
https://datatracker.ietf.org/doc/html/draft-sharif-agent-audit-trail-01
A diff from the previous version is available at:
https://author-tools.ietf.org/iddiff?url2=draft-sharif-agent-audit-trail-01
Internet-Drafts are also available by rsync at:
rsync.ietf.org::internet-drafts
_______________________________________________
I-D-Announce mailing list -- [email protected]
To unsubscribe send an email to [email protected]
lmpx.com only provides a reader for public news (NNTP) servers. It is not
affiliated with the servers or forums shown here and is not responsible for
the content of articles, which is written by their respective authors.