I-D Action: draft-dogru-cedulon-03.txt

Internet-Draft draft-dogru-cedulon-03.txt is now available.

   Title:   Cedulon: An Audit Layer for Agent-to-Agent Commerce
   Author:  Emek Can Dogru
   Name:    draft-dogru-cedulon-03.txt
   Pages:   63
   Dates:   2026-08-28

Abstract:

   This document defines the Cedulon Protocol, an audit layer for agent-
   to-agent commerce.  Payment rails such as HTTP 402 flows (x402) and
   mandate protocols (AP2) already move value.  They do not, by
   themselves, produce a fail-closed policy check and a signed spend
   receipt that a verifier can reconcile against a rail extract.
   Cedulon specifies a Trade Manifest (signed offer before payment), a
   Policy Decision Point with default deny, a Spend Receipt (COSE/CWT
   claim set after a gated payment), epoch checkpoints, and rail-extract
   reconciliation.  The reconciliation shows that no settlement on the
   extract lacks a receipt and no settled receipt is absent from the
   extract.  That result is unconditional only when the verifier pins
   the rail key out of band and states the period under audit; otherwise
   the document requires it to be reported as conditional.  Checkpoints
   carry the suppression guarantee, so the document profiles the
   checkpoint as a Signed Statement, gives the verification algorithm a
   step that consumes the transparency receipts returned for
   checkpoints, names what a witness holding a checkpoint the presented
   chain omits reports, brings equivocation within reach by comparing
   recorded copies against the presented chain, and states how
   checkpoint totals may be withheld without withholding the fact that
   they were.  This revision states the trust roots the earlier ones
   left implicit: no signed object may be verified against a key it
   carries itself, and a presented Trade Manifest must be bound both to
   the receipts that name it and to the terms those receipts claim.  It
   also names a threat no adversary causes, a settlement recorded on a
   rail with no receipt behind it.  It also defines a Dispute Evidence
   Bundle (evidence, not an award) and optional SCITT anchoring.
   Cedulon is not a competitor to x402 or AP2; it sits above them.

The IETF datatracker status page for this Internet-Draft is:
https://datatracker.ietf.org/doc/draft-dogru-cedulon/

There is also an HTML version available at:
https://www.ietf.org/archive/id/draft-dogru-cedulon-03.html

A diff from the previous version is available at:
https://author-tools.ietf.org/iddiff?url2=draft-dogru-cedulon-03

Internet-Drafts are also available by rsync at:
rsync.ietf.org::internet-drafts


_______________________________________________
I-D-Announce mailing list -- [email protected]
To unsubscribe send an email to [email protected]