# Agentic AI drafts at the IETF: digest (since 7d) Last scan 2026-10-23 12:18 UTC: 214 drafts read, 9 classified, classifier typesafe/jev. Candidates waiting for review: 157. ## New candidates (25) - **draft-das-sandbox-credential-egress-finality** rev -00 (2026-10-23): Protected Execution Finality for Sandboxed AI Agents, Credential Mediation, Process Lineage, and Network Egress Section: Authorization and Delegation (63%). Relevance 95%, agents primary subject. Style: not scored. https://datatracker.ietf.org/doc/draft-das-sandbox-credential-egress-finality/ - **draft-das-distributed-agent-authority-finality** rev -00 (2026-10-23): Distributed Authority and Execution-Finality for Multi-Agent Systems, Delegated Operations, and Cross-Domain Gateways Section: Authorization and Delegation (97%). Relevance 95%, agents primary subject. Style: not scored. https://datatracker.ietf.org/doc/draft-das-distributed-agent-authority-finality/ - **draft-swarmspeak-handshake** rev -00 (2026-10-19): The SwarmSpeak Handshake Protocol, Version 1.1 Section: Authorization and Delegation (37%). Relevance 95%, agents primary subject. Style: not scored. https://datatracker.ietf.org/doc/draft-swarmspeak-handshake/ - **draft-das-kernel-hardware-execution-finality** rev -00 (2026-10-23): Protected Execution-Finality Enforcement for Autonomous AI Agents Across Kernel, Hypervisor, Hardware, and Native-Resource Boundaries Section: Authorization and Delegation (37%). Relevance 94%, agents primary subject. Style: not scored. https://datatracker.ietf.org/doc/draft-das-kernel-hardware-execution-finality/ - **draft-zambo-aer1** rev -26 (2026-10-23): AER-1: A Portable Execution Receipt for AI Agent Tool Calls Section: Attestation and Trust (100%). Relevance 94%, agents primary subject. Style: not scored. https://datatracker.ietf.org/doc/draft-zambo-aer1/ - **draft-burls-mtac** rev -01 (2026-10-19): Merkle Tree Agent Certificates (MTAC): A Merkle Tree Certificates Profile for AI Agent Identity Section: Identity and Authentication (100%). Relevance 94%, agents primary subject. Style: not scored. https://datatracker.ietf.org/doc/draft-burls-mtac/ - **draft-thaha-scitt-agent-execution-evidence** rev -00 (2026-10-19): Agent Execution Evidence: A SCITT Profile for Verifiable Records of AI Agent Runs Section: Attestation and Trust (100%). Relevance 94%, agents primary subject. Style: not scored. https://datatracker.ietf.org/doc/draft-thaha-scitt-agent-execution-evidence/ - **draft-hood-independent-agis** rev -01 (2026-10-18): Agentic Grammar and Interface Specification (AGIS) Section: Agent Protocols and Communication (100%). Relevance 94%, agents primary subject. Style: review, AI 29%. https://datatracker.ietf.org/doc/draft-hood-independent-agis/ - **draft-senarath-a2wp** rev -01 (2026-10-17): Agent-to-Wallet Protocol for Digital Credentials (A2WP) Section: Identity and Authentication (81%). Relevance 94%, agents primary subject. Style: not scored. https://datatracker.ietf.org/doc/draft-senarath-a2wp/ - **draft-morrison-mcp-tool-surface-names-registry** rev -03 (2026-10-22): An IANA Registry for Model Context Protocol Tool Surface Names Section: Agent Protocols and Communication (61%). Relevance 93%, agents significant use case. Style: not scored. https://datatracker.ietf.org/doc/draft-morrison-mcp-tool-surface-names-registry/ - **draft-thaha-wimse-agent-evidence-binding** rev -00 (2026-10-19): Evidence Binding for AI Agent Credentials Section: Attestation and Trust (100%). Relevance 93%, agents primary subject. Style: not scored. https://datatracker.ietf.org/doc/draft-thaha-wimse-agent-evidence-binding/ - **draft-gilda-audit-agent-audit-record** rev -00 (2026-10-16): An Audit Record Format for AI Agent Authorization Decisions Section: Attestation and Trust (67%). Relevance 93%, agents primary subject. Style: not scored. https://datatracker.ietf.org/doc/draft-gilda-audit-agent-audit-record/ - **draft-rapp-ammp** rev -00 (2026-10-23): The Agent Mediated Messaging Protocol (AMMP) Section: Agent Protocols and Communication (100%). Relevance 92%, agents primary subject. Style: not scored. https://datatracker.ietf.org/doc/draft-rapp-ammp/ - **draft-dembowski-agentledger-proof-of-behavior** rev -00 (2026-10-22): Proof-of-Behavior Protocol for Autonomous AI Agents Section: Attestation and Trust (100%). Relevance 92%, agents primary subject. Style: clear, AI 18%. https://datatracker.ietf.org/doc/draft-dembowski-agentledger-proof-of-behavior/ - **draft-morrison-acts-for** rev -00 (2026-10-22): Acts-For: Signing In to a Website with a ~handle, for a Person or an Agent Acting for One Section: Authorization and Delegation (55%). Relevance 92%, agents significant use case. Style: not scored. https://datatracker.ietf.org/doc/draft-morrison-acts-for/ - **draft-hood-agtp-standard-methods** rev -01 (2026-10-18): AGTP Standard Extended Method Vocabulary Section: Agent Protocols and Communication (100%). Relevance 92%, agents primary subject. Style: clear, AI 35%. https://datatracker.ietf.org/doc/draft-hood-agtp-standard-methods/ - **draft-narvaneni-agent-uri** rev -04 (2026-10-20): The agent URI Scheme and Verifiable Agent Identity Section: Identity and Authentication (100%). Relevance 91%, agents primary subject. Style: clear, AI 20%. https://datatracker.ietf.org/doc/draft-narvaneni-agent-uri/ - **draft-mccormack-ztip** rev -01 (2026-10-18): The Zero Trust Intelligence Protocol (ZTIP): Governed, Independently Verified AI Agent Transactions Section: Agent Protocols and Communication (59%). Relevance 91%, agents primary subject. Style: not scored. https://datatracker.ietf.org/doc/draft-mccormack-ztip/ - **draft-liu-mcguinness-oauth-bounded-work** rev -00 (2026-10-17): OAuth 2.0 Bounded Work Authorization Section: Authorization and Delegation (100%). Relevance 91%, agents significant use case. Style: not scored. https://datatracker.ietf.org/doc/draft-liu-mcguinness-oauth-bounded-work/ - **draft-nivalto-agentroa-route-authorization** rev -01 (2026-10-17): Agent Route Origin Authorization (AgentROA): A Cryptographic Policy Enforcement Framework for AI Agent Actions Section: Authorization and Delegation (100%). Relevance 91%, agents primary subject. Style: clear, AI 24%. https://datatracker.ietf.org/doc/draft-nivalto-agentroa-route-authorization/ - **draft-chen-oauth-agent-intent-token** rev -00 (2026-10-19): The Intent Token - A Credential for Delegated User Intent Section: Authorization and Delegation (100%). Relevance 90%, agents primary subject. Style: not scored. https://datatracker.ietf.org/doc/draft-chen-oauth-agent-intent-token/ - **draft-yang-dmsc-ioa-task-protocol** rev -03 (2026-10-23): Internet of Agents Task Protocol (IoA Task Protocol) for Heterogeneous Agent Collaboration Section: Agent Protocols and Communication (100%). Relevance 89%, agents primary subject. Style: review, AI 50%. https://datatracker.ietf.org/doc/draft-yang-dmsc-ioa-task-protocol/ - **draft-morrison-org-alter-policy-provision** rev -06 (2026-10-22): Policy Provision and Governance Inheritance from an Organisational Identity Substrate Section: Authorization and Delegation (47%). Relevance 88%, agents primary subject. Style: clear, AI 15%. https://datatracker.ietf.org/doc/draft-morrison-org-alter-policy-provision/ - **draft-sharif-openid-agent-identity** rev -02 (2026-10-21): OpenID Connect Agent Identity Claims for Autonomous AI Agents Section: Identity and Authentication (100%). Relevance 88%, agents primary subject. Style: clear, AI 27%. https://datatracker.ietf.org/doc/draft-sharif-openid-agent-identity/ - **draft-foroughi-agent-protocol-dimensions** rev -01 (2026-10-19): A Dimensional Model for Characterizing AI Agent Protocol Proposals and Their Substrates Section: Agent Protocols and Communication (100%). Relevance 88%, agents primary subject. Style: clear, AI 18%. https://datatracker.ietf.org/doc/draft-foroughi-agent-protocol-dimensions/ ## Curated drafts that changed (6) - draft-nelson-agent-delegation-receipts: new revision -14 → -15 (2026-10-22) https://datatracker.ietf.org/doc/draft-nelson-agent-delegation-receipts/ - draft-morrison-mcp-dns-discovery: new revision -08 → -09 (2026-10-22) https://datatracker.ietf.org/doc/draft-morrison-mcp-dns-discovery/ - draft-ietf-wimse-http-signature: new revision -07 → -08 (2026-10-20) https://datatracker.ietf.org/doc/draft-ietf-wimse-http-signature/ - draft-farrel-dawn-terminology: new revision -04 → -05 (2026-10-19) https://datatracker.ietf.org/doc/draft-farrel-dawn-terminology/ - draft-king-dawn-requirements: new revision -01 → -02 (2026-10-19) https://datatracker.ietf.org/doc/draft-king-dawn-requirements/ - draft-mozley-aidiscovery: expired (2026-10-18) https://datatracker.ietf.org/doc/draft-mozley-aidiscovery/ Source: https://ietf.jaime.win/agentic-ai-new. JSON: https://ietf.jaime.win/api/agentic/digest?since=7d.