I-D Action: draft-wei-aic-jwt-00.txt

Internet-Draft draft-wei-aic-jwt-00.txt is now available.

   Title:   AI Agent Identity Certificate (AIC) JSON Web Token Profile
   Author:  Jijie Wei
   Name:    draft-wei-aic-jwt-00.txt
   Pages:   37
   Dates:   2026-08-24

Abstract:

   This document defines the JSON Web Token (JWT) profile of the AI
   Agent Identity Certificate (AIC), a companion specification to draft-
   wei-aic-identity-cert-00.  The AIC X.509 extension binds an AI
   Agent's cryptographic identity to a responsible principal, carries a
   structured capability container, authorization boundary constraints,
   delegation mode, and principal-signed delegation evidence, and
   enables fully offline authorization decisions at the TLS layer.

   AIC-JWT encodes the same data model as an application-layer JWT so
   that the same authorization semantics can be enforced by HTTP APIs,
   web applications, and OAuth 2.0 ecosystems where transport-layer
   certificate presentation is not available.  The specification
   defines:

   *  a nested JWS structure that preserves the two-layer signature
      model of AIC -- a principal-signed DelegationAuthorization (DA)
      JWT embedded in and covered by an issuer-signed outer JWT;

   *  a namespaced aic claim carrying agent identity, principal binding,
      structured capabilities, delegation mode, and authorization
      constraints;

   *  principal binding by SPKI hash or JWK thumbprint, with optional
      credential bundle presentation in PKI deployments;

   *  issuance flows for both PKI-based CAs and OAuth 2.0 authorization
      servers, including RFC 7523 assertion exchange and RFC 8693 token
      exchange;

   *  validation rules, IANA registrations, and security considerations
      aligned with the OAuth 2.0 and JOSE specifications.

The IETF datatracker status page for this Internet-Draft is:
https://datatracker.ietf.org/doc/draft-wei-aic-jwt/

There is also an HTMLized version available at:
https://datatracker.ietf.org/doc/html/draft-wei-aic-jwt-00

Internet-Drafts are also available by rsync at:
rsync.ietf.org::internet-drafts


_______________________________________________
I-D-Announce mailing list -- [email protected]
To unsubscribe send an email to [email protected]