<?xml version="1.0" encoding="UTF-8"?>
<reference anchor="I-D.carleton-workload-authz-grant" target="https://datatracker.ietf.org/doc/html/draft-carleton-workload-authz-grant-00">
   <front>
      <title>Workload Authorization Grant</title>
      <author initials="P." surname="Carleton" fullname="Paul Carleton">
         <organization>Anthropic</organization>
      </author>
      <date month="August" day="3" year="2026" />
      <abstract>
	 <t>   This document profiles the Agent Identity Management System (AIMS)
   framework for agent platforms that host many agent instances per
   customer.  Each agent is identified by an opaque, non-reassignable
   agent identifier; the agent obtains access tokens by presenting a JWT
   authorization grant (RFC 7523), signed by the platform&#x27;s per-tenancy
   issuer, in the assertion parameter at the authorization server
   protecting the resource server.  Trust is established once, by
   reference to the issuer&#x27;s published metadata and keys; agent creation
   requires no per-agent step at the authorization server or resource
   server; and authorization is expressed over platform-asserted agent
   properties that resource servers map locally to permissions.  This
   profile addresses agents acting on their own behalf; access on behalf
   of a user or other principal is out of scope, though the design is
   intended to compose with existing delegation mechanisms in which the
   agent appears as the actor.

	 </t>
      </abstract>
   </front>
   <seriesInfo name="Internet-Draft" value="draft-carleton-workload-authz-grant-00" />
   
</reference>
