<?xml version="1.0" encoding="UTF-8"?>
<reference anchor="I-D.helixar-hdp-agentic-delegation" target="https://datatracker.ietf.org/doc/html/draft-helixar-hdp-agentic-delegation-00">
   <front>
      <title>Human Delegation Provenance Protocol (HDP): Cryptographic Chain-of-Custody for Agentic AI Systems</title>
      <author initials="H." surname="Limited" fullname="Helixar Limited">
         <organization>Helixar Limited</organization>
      </author>
      <date month="March" day="25" year="2026" />
      <abstract>
	 <t>   Agentic AI systems operate on behalf of human principals, often
   delegating tasks through multi-step chains of AI agents.  There is
   currently no standard mechanism to record who authorized an agent to
   act, under what scope, and through what chain of delegation , in a
   way that can be verified offline, without a central registry, and
   without third-party trust anchors.

   This document specifies the Human Delegation Provenance Protocol
   (HDP) version 0.1, a lightweight token-based protocol that captures,
   structures, cryptographically signs, and verifies human delegation
   context in agentic AI systems.  An HDP token binds a human
   authorization event to a session, records each agent&#x27;s delegation
   action as a signed hop in an append-only chain, and enables any
   participant to verify the full provenance record using only the
   issuer&#x27;s Ed25519 public key and the current session identifier.
   Verification is fully offline.  No registry lookup, no network call,
   and no third-party trust anchor is required.

	 </t>
      </abstract>
   </front>
   <seriesInfo name="Internet-Draft" value="draft-helixar-hdp-agentic-delegation-00" />
   
</reference>
