{
 "acronym": "AAuth",
 "adoption": {
  "level": "unmeasured",
  "by": null,
  "probe_run": null
 },
 "aliases": [
  "draft-hardt-oauth-aauth-protocol"
 ],
 "analog": "OAuth, with the agent signing its own requests",
 "audience": [
  "agent-builder",
  "platform",
  "standards-body"
 ],
 "collisions": [
  "Agent Authorization Grant (Rosenberg), draft-rosenberg-oauth-aauth"
 ],
 "discovery": {
  "mechanism": "not determined from the datatracker listing",
  "path": null
 },
 "dispute": null,
 "evidence": [
  {
   "claim": "draft-hardt-oauth-aauth-protocol-11 is dated 2026-09-25 and expires 2027-03-29.",
   "label": "VERIFIED",
   "url": "https://datatracker.ietf.org/doc/draft-hardt-oauth-aauth-protocol/",
   "date": "2026-09-25",
   "retrieved_at": "2026-10-15T22:21:23Z",
   "source_type": "standards-body",
   "http_status": 200,
   "content_sha256": "b3f78bf766c1de1f48be52ec8e5aacf1bbb98efd30479122d2a66ca0f1b08049",
   "detector": "phase-a@2026-10-15"
  },
  {
   "claim": "draft-hardt-aauth-headers-00 is dated 2026-10-04.",
   "label": "VERIFIED",
   "url": "https://datatracker.ietf.org/doc/draft-hardt-aauth-headers/",
   "date": "2026-10-04",
   "retrieved_at": "2026-10-15T22:21:25Z",
   "source_type": "standards-body",
   "http_status": 200,
   "content_sha256": "a071e220dfe6d6ed4e65fefcff35889df33a836db9bd69a7ab9e5427e0a7adbf",
   "detector": "phase-a@2026-10-15"
  },
  {
   "claim": "draft-hardt-aauth-headers-00 (the companion headers draft, not the protocol draft) is marked Expired by the Datatracker as of 2026-10-04.",
   "label": "VERIFIED",
   "url": "https://datatracker.ietf.org/doc/draft-hardt-aauth-headers/",
   "date": "2026-04-02",
   "retrieved_at": "2026-10-15T22:53:17Z",
   "source_type": "standards-body",
   "http_status": 200,
   "content_sha256": "58201d0d03f1f478254c052b1e9722554e900019b4782c259d5d7336c6c9ef71",
   "detector": "ietf@1.0"
  },
  {
   "claim": "Companion draft draft-hardt-aauth-headers-00 expired on 2026-10-04; the record follows draft-hardt-oauth-aauth-protocol",
   "label": "VERIFIED",
   "url": "https://datatracker.ietf.org/doc/draft-hardt-aauth-headers/",
   "date": "2026-04-02",
   "retrieved_at": "2026-10-16T05:02:16Z",
   "source_type": "standards-body",
   "http_status": 200,
   "content_sha256": "58201d0d03f1f478254c052b1e9722554e900019b4782c259d5d7336c6c9ef71",
   "detector": "ietf@1.0"
  }
 ],
 "form": "http-header",
 "governance": "IETF Internet-Draft by Dick Hardt",
 "group": null,
 "history": [
  {
   "date": "2026-10-15",
   "note": "curated update 2026-10-15"
  },
  {
   "date": "2026-10-16",
   "note": "Expired Internet-Draft (expired 2026-10-04)"
  },
  {
   "date": "2026-10-16",
   "note": "correction: the 2026-10-04 expiry belongs to the companion headers draft; the protocol draft -11 is active until 2027-03-29, so native_status and phase restored"
  },
  {
   "date": "2026-10-16",
   "note": "use-case tags (auto)"
  },
  {
   "date": "2026-10-16",
   "note": "Companion draft draft-hardt-aauth-headers-00 expired on 2026-10-04; the record follows draft-hardt-oauth-aauth-protocol"
  }
 ],
 "id": "aauth-hardt",
 "implementation": "unknown",
 "last_verified": "2026-10-18",
 "name": "AAuth (Hardt)",
 "native_status": "Active Internet-Draft, draft-hardt-oauth-aauth-protocol-11 (2026-09-25, expires 2027-03-29); the companion draft-hardt-aauth-headers-00 (2026-10-04) is marked Expired by the Datatracker",
 "origin": {
  "org": "Dick Hardt",
  "date": null
 },
 "pairs_with": [
  "http-message-signatures",
  "aauth",
  "web-bot-auth-signature-agent-card",
  "oauth-metadata-for-agents",
  "identity-assertion-authz-grant"
 ],
 "part_of": null,
 "parties": [
  "agent-site",
  "agent-agent"
 ],
 "phase": "draft",
 "probe": {
  "method": "GET",
  "path": "none",
  "parse": "not applicable: discovery mechanics were not reviewed for this record",
  "on_absent": "No presence signal exists for this record; absence of a probe result says nothing about adoption."
 },
 "question": "How does an agent obtain and present authorisation to act at a resource, using signed HTTP requests?",
 "scope": "general",
 "spec_url": "https://datatracker.ietf.org/doc/draft-hardt-oauth-aauth-protocol/",
 "step": "permit",
 "summary_md": "AAuth in its current form is Dick Hardt's Internet-Draft `draft-hardt-oauth-aauth-protocol`, at revision -11 (2026-09-25, expiring 2027-03-29) [1]. A companion draft, `draft-hardt-aauth-headers`, was published as -00 on 2026-10-04 and is already marked Expired by the Datatracker [2]; the protocol draft itself is active.\n\nThis is a different document from the Rosenberg draft, which this site tracks as `aauth` (Agent Authorization Grant). That one expired on 2026-04-23, and the Hardt draft is the active AAuth line.\n\nThe form, party and discovery details here are placeholders pending a read of the drafts; only the version, dates and expiry above are taken from the datatracker.",
 "track": "ietf",
 "use_cases": [
  "prove-agent-identity",
  "delegate-user-authority"
 ],
 "version": {
  "label": "draft-hardt-oauth-aauth-protocol-11",
  "date": "2026-09-25"
 },
 "watch": [
  {
   "type": "ietf",
   "doc": "draft-hardt-oauth-aauth-protocol"
  },
  {
   "type": "ietf",
   "doc": "draft-hardt-aauth-headers"
  }
 ],
 "prerequisites": [
  "http-message-signatures"
 ],
 "freshness": "current"
}