{
 "version": 1,
 "date": "2026-10-22",
 "url": "https://agenticweb.wiki/digest/2026-10-22/",
 "generated_at": "2026-10-22T21:00:00Z",
 "window": {
  "from": "2026-10-21T21:00:00Z",
  "to": "2026-10-22T21:00:00Z"
 },
 "headline": "IETF WIMSE HTTP Signatures reaches draft -08 as WebBotAuth JAFAR enters expiry review",
 "lede": "IETF WIMSE recorded draft-ietf-wimse-http-signature-08 for workload-to-workload HTTP message signing, while the JAFAR Web Bot Auth draft reached its 23 Oct review threshold.",
 "items": [
  {
   "id": "2026-10-22-1",
   "title": "IETF WIMSE updates workload HTTP signature draft to revision -08",
   "body": "The IETF Workload Identity in Multi System Environments (WIMSE) working group updated draft-ietf-wimse-http-signature to revision -08 on the Datatracker, aligning workload identity token binding with RFC 9421 HTTP Message Signatures.",
   "why_it_matters": "Implementers combining SPIFFE/WIMSE workload identities with RFC 9421 request signing should track the -08 signature profile.",
   "kind": "spec",
   "related": [
    {
     "id": "wimse",
     "name": "Workload Identity in Multi System Environments",
     "url": "https://agenticweb.wiki/protocols/wimse/"
    }
   ],
   "sources": [
    {
     "url": "https://datatracker.ietf.org/doc/draft-ietf-wimse-http-signature/",
     "title": "draft-ietf-wimse-http-signature - IETF Datatracker",
     "publisher": "datatracker.ietf.org",
     "published": "2026-10-20",
     "label": "VERIFIED",
     "fetched": true
    }
   ],
   "stats": []
  }
 ],
 "stats": {
  "previous": null,
  "panel": {
   "domains": 219,
   "checked": 218,
   "errors": 1,
   "compared": 0,
   "grades": {
    "A+": 10,
    "A": 21,
    "B": 76,
    "C": 70,
    "D": 6,
    "F": 35
   },
   "adoption": [
    {
     "id": "ai-crawler-tokens-robots",
     "name": "AI Crawler User-Agent Tokens in robots.txt",
     "domains": 173,
     "delta": null
    },
    {
     "id": "llms-txt",
     "name": "llms.txt",
     "domains": 105,
     "delta": null
    },
    {
     "id": "cloudflare-content-signals-policy",
     "name": "Content Signals Policy",
     "domains": 36,
     "delta": null
    },
    {
     "id": "api-catalog-rfc9727",
     "name": "api-catalog: A Well-Known URI and Link Relation to Help Discovery of APIs",
     "domains": 19,
     "delta": null
    },
    {
     "id": "oauth-metadata-for-agents",
     "name": "OAuth Protected Resource and Authorization Server Metadata (as used for agent authorization)",
     "domains": 19,
     "delta": null
    },
    {
     "id": "ai-catalog-well-known-file",
     "name": "AI Catalog well-known file",
     "domains": 17,
     "delta": null
    },
    {
     "id": "agents-md",
     "name": "AGENTS.md",
     "domains": 14,
     "delta": null
    },
    {
     "id": "a2a",
     "name": "Agent2Agent Protocol",
     "domains": 13,
     "delta": null
    },
    {
     "id": "oauth-cimd",
     "name": "OAuth Client ID Metadata Document",
     "domains": 13,
     "delta": null
    },
    {
     "id": "mcp",
     "name": "Model Context Protocol",
     "domains": 7,
     "delta": null
    },
    {
     "id": "mcp-server-cards",
     "name": "MCP Server Cards (SEP-2127)",
     "domains": 7,
     "delta": null
    },
    {
     "id": "agents-txt",
     "name": "agents.txt",
     "domains": 6,
     "delta": null
    },
    {
     "id": "ard",
     "name": "Agentic Resource Discovery",
     "domains": 6,
     "delta": null
    },
    {
     "id": "auth-md",
     "name": "auth.md",
     "domains": 6,
     "delta": null
    },
    {
     "id": "rsl",
     "name": "Really Simple Licensing",
     "domains": 3,
     "delta": null
    },
    {
     "id": "tdmrep",
     "name": "Text and Data Mining Reservation Protocol",
     "domains": 3,
     "delta": null
    },
    {
     "id": "webbotauth",
     "name": "Web Bot Auth HTTP Message Signatures",
     "domains": 3,
     "delta": null
    },
    {
     "id": "identity-assertion-authz-grant",
     "name": "Identity Assertion JWT Authorization Grant",
     "domains": 2,
     "delta": null
    },
    {
     "id": "ads",
     "name": "Agent Directory Service",
     "domains": 1,
     "delta": null
    },
    {
     "id": "agent-permissions-json",
     "name": "agent-permissions.json",
     "domains": 1,
     "delta": null
    },
    {
     "id": "agents-json",
     "name": "agents.json",
     "domains": 1,
     "delta": null
    },
    {
     "id": "agora-protocol",
     "name": "Agora Protocol",
     "domains": 1,
     "delta": null
    },
    {
     "id": "ucp",
     "name": "Universal Commerce Protocol",
     "domains": 1,
     "delta": null
    }
   ],
   "gained": [],
   "lost": [],
   "grade_changes": []
  },
  "repos": {
   "tracked": 58,
   "movers": []
  },
  "registry": {
   "since": "2026-10-19T00:00:00Z",
   "versions": 3000,
   "servers": 1708
  }
 },
 "record_changes": [
  {
   "record_id": "wimse",
   "name": "Workload Identity in Multi System Environments (WIMSE) Architecture",
   "summary": "Datatracker shows draft-ietf-wimse-http-signature-08, dated 2026-10-20 (related draft)",
   "url": "https://datatracker.ietf.org/doc/draft-ietf-wimse-http-signature/",
   "label": "VERIFIED",
   "date": "2026-10-20"
  },
  {
   "record_id": "jafar",
   "name": "JAFAR: A JSON-Based Format for Publishing IP Ranges of Automated HTTP Clients",
   "summary": "draft-illyes-webbotauth-jafar-00 expires on 2026-10-23",
   "url": "https://datatracker.ietf.org/doc/draft-illyes-webbotauth-jafar/",
   "label": "VERIFIED",
   "date": "2026-04-21"
  }
 ],
 "previous": "2026-10-21",
 "method": {
  "sources": {
   "feeds": 0,
   "datatracker": 0,
   "hn": 0,
   "arxiv": 12,
   "exa": 107,
   "parallel": 5,
   "tips": 19
  },
  "candidates": 143,
  "after_dedupe": 130,
  "kept": 49,
  "fetched": 38,
  "models": {
   "triage": "claude-haiku-5-5",
   "writer": "claude-opus-5-5"
  },
  "facts": 30,
  "notes": [],
  "rules": "Items are written only from the cited sources and our own measurements; every number in an item appears in a source it cites. VERIFIED = fetched from the standard's issuer or a standards body; REPORTED = a claim by press or a third party."
 },
 "license": "CC BY 4.0"
}