Internet-Draft draft-mcphillips-agentenvelope-derived-authority-01.txt is now
available.
Title: AgentEnvelope: Derived Authority and Legitimacy for Autonomous Systems
Author: Matthew McPhillips
Name: draft-mcphillips-agentenvelope-derived-authority-01.txt
Pages: 24
Dates: 2026-08-31
Abstract:
AgentEnvelope defines a deterministic derived-authority model for
autonomous and action-performing systems. Instead of issuing bearer
credentials from a central authority, AgentEnvelope derives scoped
action capabilities from customer-held custody material and canonical
action envelopes. A verifier can check an action signature against a
public action record without receiving roots, seeds, private keys,
mint material, or hosted service access.
This revision extends the model with legitimacy: a governance state
that records whether a cryptographically valid authority remains
admissible under current policy, evidence, time, and operating
context. Legitimacy separates provenance from present-tense
authorization. A command can remain signed and verifiable while
becoming illegitimate because operating facts, policy, or evidence
changed.
For autonomous-system deployments, derived authority and legitimacy
support an IAM model concerned with authority, admissibility,
accountability, and audit for actors that perform actions, including
AI agents, workflows, bots, microservices, devices, robots,
serverless workers, and multi-agent systems.
The IETF datatracker status page for this Internet-Draft is:
https://datatracker.ietf.org/doc/draft-mcphillips-agentenvelope-derived-authority/
There is also an HTML version available at:
https://www.ietf.org/archive/id/draft-mcphillips-agentenvelope-derived-authority-01.html
A diff from the previous version is available at:
https://author-tools.ietf.org/iddiff?url2=draft-mcphillips-agentenvelope-derived-authority-01
Internet-Drafts are also available by rsync at:
rsync.ietf.org::internet-drafts
_______________________________________________
I-D-Announce mailing list -- [email protected]
To unsubscribe send an email to [email protected]
lmpx.com only provides a reader for public news (NNTP) servers. It is not
affiliated with the servers or forums shown here and is not responsible for
the content of articles, which is written by their respective authors.