{
 "id": "agent-authorization-envelope",
 "name": "Agent Authorization Envelope",
 "acronym": "AAE",
 "aliases": [],
 "collisions": [],
 "step": "permit",
 "parties": [
  "agent-site"
 ],
 "form": "document-format",
 "track": "ietf",
 "scope": "general",
 "question": "How can a relying party verify offline, without calling the issuer, that an agent holds a mandate with limits, an expiry and a bounded delegation chain?",
 "analog": "A signed power of attorney with stated spending limits and an expiry date that a counterparty can check on its own.",
 "origin": {
  "org": "CryptoKRI GmbH (Lars Kersten Kroehl)",
  "date": "2026-05-21"
 },
 "governance": "Individual Internet-Draft submitted to the IETF datatracker by a single author; not adopted by a working group per the page.",
 "native_status": "Individual Internet-Draft",
 "phase": "draft",
 "implementation": "unknown",
 "adoption": {
  "level": "unmeasured",
  "by": null,
  "probe_run": null
 },
 "version": {
  "label": "Individual Internet-Draft (May 2026)",
  "date": "2026-05-21"
 },
 "spec_url": "https://insights.bostonidentity.com/research/ietf-datatracker-2026-05-21-agent-authorization-envelope-aae",
 "discovery": {
  "mechanism": "Envelope presented by the agent to the relying party; no discovery path is described. The optional revocation endpoint is named inside the envelope.",
  "path": null
 },
 "probe": {
  "method": "NONE",
  "path": "",
  "parse": "",
  "on_absent": "No site-level signal to observe; support is only visible when an agent presents an envelope."
 },
 "evidence": [
  {
   "claim": "The AAE is a W3C Verifiable Credential signed as a compact JWS (EdDSA/Ed25519) with mandatory mandate, constraints and validity blocks; the key is named by a DID URL.",
   "label": "REPORTED",
   "url": "https://insights.bostonidentity.com/research/ietf-datatracker-2026-05-21-agent-authorization-envelope-aae",
   "date": "2026-05-21"
  },
  {
   "claim": "A relying party MUST reject an AAE if any required constraint is unrecognized or cannot be evaluated; delegated envelopes may only narrow the parent's grant, with a maximum delegation depth.",
   "label": "REPORTED",
   "url": "https://insights.bostonidentity.com/research/ietf-datatracker-2026-05-21-agent-authorization-envelope-aae",
   "date": "2026-05-21"
  }
 ],
 "summary_md": "The Agent Authorization Envelope (AAE) is an individual IETF Internet-Draft by Lars Kersten Kroehl of CryptoKRI GmbH. It defines a JWS-secured W3C Verifiable Credential carrying a mandate, constraints and a validity block for an agent acting under delegated authority. Relying parties run nine ordered checks, including proof of key possession, revocation and delegation-chain narrowing, and refuse when a required constraint or revocation status cannot be checked. Delegated envelopes may only narrow the parent's actions, caps, allowlists and validity window.",
 "part_of": null,
 "group": null,
 "candidate": true,
 "confidence": 0.6,
 "use_cases": [
  "delegate-user-authority",
  "prove-agent-identity",
  "audit-agent-actions"
 ],
 "audience": [
  "agent-builder",
  "platform",
  "standards-body"
 ],
 "pairs_with": [
  "wimse",
  "spiffe"
 ],
 "prerequisites": [],
 "dispute": null,
 "last_verified": "2026-10-19",
 "history": [
  {
   "date": "2026-10-19",
   "note": "auto-drafted candidate from exa (https://insights.bostonidentity.com/research/ietf-datatracker-2026-05-21-agent-authorization-envelope-aae)"
  }
 ],
 "watch": [
  {
   "type": "page",
   "url": "https://insights.bostonidentity.com/research/ietf-datatracker-2026-05-21-agent-authorization-envelope-aae"
  }
 ],
 "freshness": "current",
 "url": "https://agenticweb.wiki/protocols/agent-authorization-envelope/",
 "category": "permit",
 "type": "protocol"
}