<?xml version="1.0" encoding="UTF-8"?>
<reference anchor="I-D.jiang-wimse-heterogeneous-credential" target="https://datatracker.ietf.org/doc/html/draft-jiang-wimse-heterogeneous-credential-01">
   <front>
      <title>Heterogeneous Credential Verification for Workload and Agentic Systems</title>
      <author initials="Y." surname="Jiang" fullname="Yuning Jiang">
         <organization>Huawei</organization>
      </author>
      <author initials="" surname="Wangdonghui" fullname="Wangdonghui">
         <organization>Huawei</organization>
      </author>
      <author initials="Y." surname="Song" fullname="Yurong Song">
         <organization>Huawei</organization>
      </author>
      <author initials="F." surname="Liu" fullname="Faye Liu">
         <organization>Huawei</organization>
      </author>
      <date month="June" day="30" year="2026" />
      <abstract>
	 <t>   Workloads in multi-system environments, including AI agents acting on
   behalf of users and organizations, increasingly present multiple
   credentials of heterogeneous types within a single request: workload
   identity tokens, user-delegated OAuth access tokens, W3C Verifiable
   Presentations, X.509 certificates, or platform-specific API keys.
   These are issued by different authorities, follow different formats,
   are verified by different verifiers, and carry different assurance
   semantics.  A relying party that receives such a heterogeneous
   credential set has no common way to represent the set, identify each
   credential&#x27;s type, determine the authoritative verifier for it,
   interpret verification results consistently, or combine multiple
   results into a single handling decision.

   This document defines a mechanism for processing a heterogeneous
   credential set on receipt.  It specifies a representation of the
   credential set, a procedure for identifying each credential&#x27;s type
   and determining its verifier, a minimal common model for verification
   results that lets results from different verifiers be compared, and a
   policy model that combines multiple results into one handling
   decision.  The mechanism is transport-agnostic and does not constrain
   where the processing functions are deployed.

	 </t>
      </abstract>
   </front>
   <seriesInfo name="Internet-Draft" value="draft-jiang-wimse-heterogeneous-credential-01" />
   
</reference>
