{
 "id": "agent-principal-binding",
 "name": "Security Principal and Verifier Binding for Agent Communication Protocols",
 "acronym": "",
 "aliases": [
  "Agent Principal Binding",
  "draft-bu-agentproto-security-principal-binding"
 ],
 "collisions": [],
 "step": "identify",
 "parties": [
  "agent-agent",
  "agent-site"
 ],
 "form": "document-format",
 "track": "ietf",
 "scope": "general",
 "question": "How can an agent communication protocol state, for each security-relevant claim (user authority, agent instance, tool identity, delegation, session, action evidence), which field carries it, which party verifies it, and what happens when it is absent, stale, or unverifiable?",
 "analog": "A claim-to-verifier checklist template for protocol security reviews, similar to a threat-model matrix.",
 "origin": {
  "org": "S. Bu (individual IETF Internet-Draft author)",
  "date": null
 },
 "governance": "Individual Internet-Draft submitted under BCP 78 and BCP 79; listed under the Agent Communication Protocols workgroup label.",
 "native_status": "Internet-Draft, Intended Status: Informational; expires 17 April 2027",
 "phase": "draft",
 "implementation": "none-found",
 "adoption": {
  "level": "unmeasured",
  "by": null,
  "probe_run": null
 },
 "version": {
  "label": "draft-bu-agentproto-security-principal-binding-08",
  "date": "2026-10-14"
 },
 "spec_url": "https://datatracker.ietf.org/doc/html/draft-bu-agentproto-security-principal-binding-08",
 "discovery": {
  "mechanism": "none; a protocol-neutral review and specification-authoring model, not a wire protocol",
  "path": null
 },
 "probe": {
  "method": "NONE",
  "path": "",
  "parse": "",
  "on_absent": "Not applicable; no site-observable artifact is defined."
 },
 "evidence": [
  {
   "claim": "Internet-Draft -08 published 14 October 2026, Intended Status Informational, defining a verifier-facing claim matrix format, row-outcome semantics (satisfied, unsatisfied, indeterminate, unsupported, not-evaluated, not-applicable) and dependency-closure rules for composed mappings. States it does not define a new agent protocol, token format, audit log or authorization system.",
   "label": "REPORTED",
   "url": "https://datatracker.ietf.org/doc/html/draft-bu-agentproto-security-principal-binding-08",
   "date": "2026-10-14"
  }
 ],
 "summary_md": "An individual IETF Internet-Draft that defines a protocol-neutral matrix format for separating security claims such as user authority, agent instance identity, tool identity, delegation, session binding and action evidence. For each claim, the matrix records the carrier field, the verifier, the binding and freshness rule, the failure behavior, and the accepted result. It also defines row-outcome semantics and dependency-closure rules so that composite results are not stronger than their verified inputs. It is Informational guidance and does not define a wire protocol.",
 "part_of": null,
 "group": null,
 "candidate": true,
 "confidence": 0.6,
 "use_cases": [
  "prove-agent-identity",
  "delegate-user-authority",
  "audit-agent-actions"
 ],
 "audience": [
  "standards-body",
  "agent-builder"
 ],
 "pairs_with": [],
 "prerequisites": [],
 "dispute": null,
 "last_verified": "2026-10-18",
 "history": [
  {
   "date": "2026-10-16",
   "note": "auto-drafted candidate from exa (https://datatracker.ietf.org/doc/html/draft-bu-agentproto-security-principal-binding-08)"
  }
 ],
 "watch": [
  {
   "type": "page",
   "url": "https://datatracker.ietf.org/doc/html/draft-bu-agentproto-security-principal-binding-08"
  }
 ],
 "freshness": "current",
 "url": "https://agenticweb.wiki/protocols/agent-principal-binding/",
 "category": "identify",
 "type": "protocol"
}