I-D Action: draft-das-enterprise-ai-output-finality-00.txt

Internet-Draft draft-das-enterprise-ai-output-finality-00.txt is now
available.

   Title:   A Compromised AI Server Must Not Become a Map of the Enterprise: Non-Joinable Vaults and Output-Release Finality
   Author:  Sangam Das
   Name:    draft-das-enterprise-ai-output-finality-00.txt
   Pages:   26
   Dates:   2026-08-26

Abstract:

   Past cyber theft stole files.  Present theft steals live sessions and
   SaaS tokens.  The next theft does not need a dump.  A frontier
   enterprise assistant that can see mail, tickets, code, finance, and
   memory can join those fragments into a meaning that was never stored
   as one record, then act.  That is enterprise-future mapping:
   reconstruction of strategy, relationships, and probable next moves,
   followed by send, write, or tool invoke [DAS-ISOLATION].

   IAM, DLP, clean rooms, TEEs, and output filters still answer who may
   touch a store.  They do not answer whether separately lawful
   fragments may be joined into a new protected meaning, or whether that
   meaning may leave through Claude, ChatGPT Enterprise, a computer-use
   agent, or an MCP tool.

   This profile keeps identity, content, and association under
   independently controlled vaults, joins them only under a session-
   bound Reconstruction Authorization Object, seals the Candidate
   Output, commits a receipt before release authority exists, and
   completes send, render, store, or invoke only at an Output Release
   Boundary.  Compromise of the model host is not reconstruction.
   Reconstruction is not release.

The IETF datatracker status page for this Internet-Draft is:
https://datatracker.ietf.org/doc/draft-das-enterprise-ai-output-finality/

There is also an HTML version available at:
https://www.ietf.org/archive/id/draft-das-enterprise-ai-output-finality-00.html

Internet-Drafts are also available by rsync at:
rsync.ietf.org::internet-drafts


_______________________________________________
I-D-Announce mailing list -- [email protected]
To unsubscribe send an email to [email protected]