<?xml version="1.0" encoding="UTF-8"?>
<reference anchor="I-D.jiang-oauth-intent-admission" target="https://datatracker.ietf.org/doc/html/draft-jiang-oauth-intent-admission-00">
   <front>
      <title>Intent Admission Assertions for Agentic Systems</title>
      <author initials="Y." surname="Jiang" fullname="Yuning Jiang">
         <organization>Huawei</organization>
      </author>
      <author initials="L." surname="Lun" fullname="LUN LI">
         <organization>Huawei</organization>
      </author>
      <author initials="Y." surname="Song" fullname="Yurong Song">
         <organization>Huawei</organization>
      </author>
      <author initials="F." surname="Liu" fullname="Faye Liu">
         <organization>Huawei</organization>
      </author>
      <date month="June" day="23" year="2026" />
      <abstract>
	 <t>   In agentic systems, an intent expressed by a user, application, or
   agent may be forwarded to a remote system that triggers high-impact
   actions.  If the originator of an intent is not authenticated, is not
   authorized to request the targeted action, or has not obtained the
   required consent, the receiving system may act on a forged or
   unauthorized intent.

   This document defines the Intent Admission Assertion (IAA): a signed,
   verifiable artifact by which an admission point authenticates an
   intent originator, authorizes the request against a permission
   policy, gates consent-required actions on explicit consent from the
   user or resource owner, and conveys the result to a downstream
   execution endpoint that re-verifies it before acting.  The IAA is a
   JSON Web Token whose admission decision is expressed using Rich
   Authorization Requests (RFC 9396).

	 </t>
      </abstract>
   </front>
   <seriesInfo name="Internet-Draft" value="draft-jiang-oauth-intent-admission-00" />
   
</reference>
