# An Audit Record Format for AI Agent Authorization Decisions Agent Audit Record

[9 · Account](/category/account/)

| An Audit Record Format for AI Agent Authorization Decisions |
| --- |
| Category | [Account](/category/account/) |
| Governed by | IETF individual Internet-Draft (the datatracker lists it as an individual submission, not a working group document) |
| Status | Internet-Draft, draft-gilda-wimse-agent-audit-record-02 (2026-10-05) |
| Phase | draft |
| Implementation | none found |
| Adoption | unmeasured |
| Version | draft-gilda-wimse-agent-audit-record-02 (2026-10-05) |
| Specification | [https://datatracker.ietf.org/doc/draft-gilda-wimse-agent-audit-record/](https://datatracker.ietf.org/doc/draft-gilda-wimse-agent-audit-record/) |
| Found at | none; a record format, not a discoverable service |
| Last checked | 2026-10-18 |
| Freshness | current · checked 2026-10-18 |
| Solves | Audit what an agent did, Prove an agent's identity |

An Audit Record Format for AI Agent Authorization Decisions (Agent Audit Record) is an agentic-web standard (document format) at step 9, Account, governed by IETF individual Internet-Draft (the datatracker lists it as an individual submission, not a working group document); its own status is "Internet-Draft, draft-gilda-wimse-agent-audit-record-02 (2026-10-05)" (draft). It answers: What should a tamper-evident record of an agent's authorization decision contain? Adoption is unmeasured, last verified 2026-10-18.

[Account](/category/account/) draft-gilda-wimse-agent-audit-record defines an audit record format for AI agent authorization decisions [[1]](#ref-1). The current revision is -02, dated 2026-10-05 [[1]](#ref-1).

## Overview
It belongs with the account step beside agent-audit-trail, which covers a hash-chained log of agent actions, and with the WIMSE identity work its name points to. It defines a record format, not an endpoint, so there is nothing to probe.

Only the title, revision and date are taken from the datatracker listing; the record's field definitions have not been reviewed here.

## Discovery and probe

none; a record format, not a discoverable service

```
GET none
parse:     not applicable: audit records are exported from an operator-defined endpoint, not found at a fixed path
on absent: No presence signal exists for this record; absence of a probe result says nothing about adoption.
```

Not probed live: no-fixed-path. candidate record; probe rule pending

## History
- 2026-10-15 — curated update 2026-10-15
- 2026-10-16 — use-case tags (auto)
- 2026-10-17 — Datatracker marks draft-gilda-wimse-agent-audit-record as replaced by draft-gilda-audit-agent-audit-record

## Instances

No instances recorded yet.

## See also

- [Audit record](/terms/audit-record/)

## References

- draft-gilda-wimse-agent-audit-record-02, 'An Audit Record Format for AI Agent Authorization Decisions', is dated 2026-10-05. — [https://datatracker.ietf.org/doc/draft-gilda-wimse-agent-audit-record/](https://datatracker.ietf.org/doc/draft-gilda-wimse-agent-audit-record/) (2026-10-05) VERIFIED
- The -02 draft text (October 2026, expires 7 April 2027) defines the record format as an in-toto predicate type. — [https://www.ietf.org/archive/id/draft-gilda-wimse-agent-audit-record-02.html](https://www.ietf.org/archive/id/draft-gilda-wimse-agent-audit-record-02.html) (2026-10-05) VERIFIED
- Datatracker marks draft-gilda-wimse-agent-audit-record as replaced by draft-gilda-audit-agent-audit-record — [https://datatracker.ietf.org/doc/draft-gilda-wimse-agent-audit-record/](https://datatracker.ietf.org/doc/draft-gilda-wimse-agent-audit-record/) (2026-10-05) VERIFIED

[JSON](/data/protocols/wimse-agent-audit-record.json) · [Markdown](/protocols/wimse-agent-audit-record/index.md)