{
 "id": "haace",
 "name": "High-Assurance Agent Control Envelope",
 "acronym": "HAACE",
 "aliases": [
  "draft-watts-high-assurance-agent-control-envelope"
 ],
 "collisions": [],
 "step": "permit",
 "parties": [
  "agent-site"
 ],
 "form": "document-format",
 "track": "ietf",
 "scope": "general",
 "question": "How can a relying party gate an exact agent action at execution time so that missing, stale, or indeterminate identity, authorization, evidence, revocation, or human-approval prerequisites fail closed?",
 "analog": "A pre-flight checklist with a separate sign-off and a logbook entry: authorization is checked against the exact action at execution time and recorded in non-bearer receipts.",
 "origin": {
  "org": "GoodShyt Group Inc.",
  "date": "2026-10-14"
 },
 "governance": "Individual Internet-Draft by a single author, submitted to the IETF Network Working Group; not adopted by a working group",
 "native_status": "Internet-Draft, Intended Status: Informational; expires 17 April 2027",
 "phase": "draft",
 "implementation": "unknown",
 "adoption": {
  "level": "unmeasured",
  "by": null,
  "probe_run": null
 },
 "version": {
  "label": "draft-watts-high-assurance-agent-control-envelope-00",
  "date": "2026-10-14"
 },
 "spec_url": "https://datatracker.ietf.org/doc/html/draft-watts-high-assurance-agent-control-envelope-00",
 "discovery": {
  "mechanism": "No discovery mechanism defined; the relying party declares an Assurance Requirement Profile (ARP) out of band",
  "path": null
 },
 "probe": {
  "method": "NONE",
  "path": "",
  "parse": "",
  "on_absent": "Support cannot be observed externally; HAACE is an internal action-time enforcement profile with no public endpoint."
 },
 "evidence": [
  {
   "claim": "The Internet-Draft defines HAACE, a protocol-neutral profile binding an exact agent action to identity status, authorization state, policy, assurance stage, evidence state, authority epoch, revocation state and oversight requirements, with fail-closed handling and non-bearer decision and execution receipts.",
   "label": "REPORTED",
   "url": "https://datatracker.ietf.org/doc/html/draft-watts-high-assurance-agent-control-envelope-00",
   "date": "2026-10-14"
  }
 ],
 "summary_md": "HAACE is an individual Internet-Draft (Informational) defining a protocol-neutral execution-gate profile for agent actions. A relying party declares an Assurance Requirement Profile; an Action Control Point evaluates an Action Request Record and emits a non-bearer Action Decision Receipt, followed by a separate Action Execution Receipt if an effect is attempted. Missing or indeterminate required premises must not produce ALLOW. It composes with OAuth, workload identity, attestation and transparency mechanisms rather than replacing them.",
 "part_of": null,
 "group": null,
 "candidate": true,
 "confidence": 0.8,
 "use_cases": [
  "audit-agent-actions",
  "delegate-user-authority",
  "let-agents-act-on-my-site"
 ],
 "audience": [
  "platform",
  "standards-body",
  "agent-builder"
 ],
 "pairs_with": [],
 "prerequisites": [],
 "dispute": null,
 "last_verified": "2026-10-19",
 "history": [
  {
   "date": "2026-10-19",
   "note": "auto-drafted candidate from exa (https://datatracker.ietf.org/doc/html/draft-watts-high-assurance-agent-control-envelope-00)"
  }
 ],
 "watch": [
  {
   "type": "page",
   "url": "https://datatracker.ietf.org/doc/html/draft-watts-high-assurance-agent-control-envelope-00"
  }
 ],
 "freshness": "current",
 "url": "https://agenticweb.wiki/protocols/haace/",
 "category": "permit",
 "type": "protocol"
}