{
 "acronym": "",
 "adoption": {
  "by": null,
  "level": "unmeasured",
  "probe_run": null
 },
 "aliases": [
  "draft-hamr-oauth-agent-delegation",
  "Agent-Delegation header"
 ],
 "analog": "A signed chain of authority on an HTTP request, each hop narrower than the last",
 "collisions": [
  "Agent Authorization Profile (draft-aap-oauth-profile) and OpenA2A AAP, which are token models rather than this header"
 ],
 "discovery": {
  "mechanism": "An Agent-Delegation HTTP header on a request signed with RFC 9421. No well-known file is defined.",
  "path": null
 },
 "dispute": null,
 "evidence": [
  {
   "claim": "draft-hamr-oauth-agent-delegation-02 is a Standards Track Internet-Draft of the Web Authorization Protocol (OAuth) working group, dated 19 September 2026 and expiring 23 March 2027. It defines an Agent-Delegation HTTP header on top of RFC 9421. Each link can only narrow scope, floors, and expiry. Call classes are r, w, and x.",
   "date": "2026-09-19",
   "label": "VERIFIED",
   "url": "https://www.ietf.org/archive/id/draft-hamr-oauth-agent-delegation-02.txt"
  },
  {
   "claim": "Datatracker document page for draft-hamr-oauth-agent-delegation.",
   "date": "2026-09-19",
   "label": "VERIFIED",
   "url": "https://datatracker.ietf.org/doc/draft-hamr-oauth-agent-delegation/"
  }
 ],
 "form": "http-header",
 "governance": "IETF OAuth Working Group (Web Authorization Protocol). Standards Track working-group draft.",
 "group": null,
 "history": [
  {
   "date": "2026-10-20",
   "note": "added from staged research 2026-10-20; header read from draft-hamr-oauth-agent-delegation-02"
  }
 ],
 "id": "oauth-agent-delegation",
 "implementation": "none-found",
 "last_verified": "2026-10-20",
 "name": "Attenuated Delegation Profile for Automated Agents",
 "native_status": "Active Internet-Draft, OAuth WG document, Intended status: Standards Track; draft-hamr-oauth-agent-delegation-02 dated 2026-09-19, expires 2027-03-23",
 "origin": {
  "org": "IETF OAuth Working Group (Hamr and co-authors)",
  "date": "2026-09-19"
 },
 "part_of": null,
 "parties": [
  "agent-site",
  "agent-agent"
 ],
 "phase": "working-group",
 "probe": {
  "method": "n/a",
  "path": "n/a (Agent-Delegation request header; no fixed origin artifact)",
  "parse": "n/a. Look for an Agent-Delegation header on a request signed under RFC 9421. Call classes are r, w, and x. Each link can only narrow scope, floors, and expiry.",
  "on_absent": "No Agent-Delegation header on a given request means this profile was not used for that call."
 },
 "question": "How can an automated agent pass on a user's authority so that each hop can only narrow scope, floors, and expiry?",
 "scope": "general",
 "spec_url": "https://www.ietf.org/archive/id/draft-hamr-oauth-agent-delegation-02.txt",
 "step": "permit",
 "summary_md": "`draft-hamr-oauth-agent-delegation-02` is a Standards Track Internet-Draft of the IETF OAuth working group, dated 19 September 2026 and expiring 23 March 2027 [1]. It defines an `Agent-Delegation` HTTP header on top of RFC 9421 HTTP Message Signatures [1]. Each link in the chain can only narrow scope, floors, and expiry. Call classes are `r`, `w`, and `x` [1].\n\nIt is a separate record from the Workload Authorization Grant, the identity-continuation assertion, and both AAP documents. The datatracker entry for the draft is [2].",
 "track": "ietf",
 "version": {
  "label": "draft-hamr-oauth-agent-delegation-02",
  "date": "2026-09-19"
 },
 "watch": [
  {
   "type": "ietf",
   "doc": "draft-hamr-oauth-agent-delegation"
  }
 ],
 "use_cases": [
  "delegate-user-authority",
  "audit-agent-actions",
  "prove-agent-identity"
 ],
 "audience": [
  "platform",
  "agent-builder",
  "standards-body"
 ],
 "pairs_with": [
  "http-message-signatures",
  "identity-assertion-authz-grant",
  "workload-authz-grant",
  "oauth-id-continuation",
  "opena2a-aap"
 ],
 "prerequisites": [
  "http-message-signatures"
 ],
 "freshness": "current"
}