How does An Audit Record Format for AI Agent Authorization Decisions compare to other account protocols?

An Audit Record Format for AI Agent Authorization Decisions (Agent Audit Record) is one of 5 standards at step 9, Account (Prove what happened; be judged). It pairs with Agent Audit Trail, WIMSE AI Identity Management System, Workload Identity in Multi System Environments (WIMSE) Architecture, SPIFFE (Secure Production Identity Framework for Everyone). It builds on Workload Identity in Multi System Environments (WIMSE) Architecture. Every standard at this step is listed at https://agenticweb.wiki/category/account/.

An Audit Record Format for AI Agent Authorization Decisions Agent Audit Record

9 · Account

An Audit Record Format for AI Agent Authorization Decisions
Category	Account
Governed by	IETF individual Internet-Draft (the datatracker lists it as an individual submission, not a working group document)
Status	Internet-Draft, draft-gilda-wimse-agent-audit-record-02 (2026-10-05)
Phase	draft
Implementation	none found
Adoption	unmeasured
Version	draft-gilda-wimse-agent-audit-record-02 (2026-10-05)
Specification	https://datatracker.ietf.org/doc/draft-gilda-wimse-agent-audit-record/
Found at	none; a record format, not a discoverable service
Last checked	2026-10-18
Freshness	current · checked 2026-10-18
Solves	Audit what an agent did, Prove an agent's identity

An Audit Record Format for AI Agent Authorization Decisions (Agent Audit Record) is an agentic-web standard (document format) at step 9, Account, governed by IETF individual Internet-Draft (the datatracker lists it as an individual submission, not a working group document); its own status is "Internet-Draft, draft-gilda-wimse-agent-audit-record-02 (2026-10-05)" (draft). It answers: What should a tamper-evident record of an agent's authorization decision contain? Adoption is unmeasured, last verified 2026-10-18.

Account draft-gilda-wimse-agent-audit-record defines an audit record format for AI agent authorization decisions ^[1]. The current revision is -02, dated 2026-10-05 ^[1].

Overview

It belongs with the account step beside agent-audit-trail, which covers a hash-chained log of agent actions, and with the WIMSE identity work its name points to. It defines a record format, not an endpoint, so there is nothing to probe.

Only the title, revision and date are taken from the datatracker listing; the record's field definitions have not been reviewed here.

Discovery and probe

none; a record format, not a discoverable service

GET none
parse:     not applicable: audit records are exported from an operator-defined endpoint, not found at a fixed path
on absent: No presence signal exists for this record; absence of a probe result says nothing about adoption.

Not probed live: no-fixed-path. candidate record; probe rule pending

History

2026-10-15 — curated update 2026-10-15
2026-10-16 — use-case tags (auto)
2026-10-17 — Datatracker marks draft-gilda-wimse-agent-audit-record as replaced by draft-gilda-audit-agent-audit-record

Instances

No instances recorded yet.

References

draft-gilda-wimse-agent-audit-record-02, 'An Audit Record Format for AI Agent Authorization Decisions', is dated 2026-10-05. — https://datatracker.ietf.org/doc/draft-gilda-wimse-agent-audit-record/ (2026-10-05) VERIFIED
The -02 draft text (October 2026, expires 7 April 2027) defines the record format as an in-toto predicate type. — https://www.ietf.org/archive/id/draft-gilda-wimse-agent-audit-record-02.html (2026-10-05) VERIFIED
Datatracker marks draft-gilda-wimse-agent-audit-record as replaced by draft-gilda-audit-agent-audit-record — https://datatracker.ietf.org/doc/draft-gilda-wimse-agent-audit-record/ (2026-10-05) VERIFIED

JSON · Markdown