<?xml version="1.0" encoding="UTF-8"?>
<reference anchor="I-D.le-scitt-derived-subjects" target="https://datatracker.ietf.org/doc/html/draft-le-scitt-derived-subjects-01">
   <front>
      <title>SCITT Profile for Independently Derived Subjects</title>
      <author initials="T." surname="Le" fullname="Thanh Le">
         </author>
      <date month="September" day="11" year="2026" />
      <abstract>
	 <t>   The Supply Chain Integrity, Transparency, and Trust (SCITT)
   architecture permits distinct Issuers to agree on a common CBOR Web
   Token (CWT) Subject Claim (sub).  This document specifies a profile
   for independently deriving that claim from shared application-defined
   Subject semantics without a shared assigning authority.

   An application maps its Subject description to a structured Value.
   This profile defines the derivation domain, deterministic binding
   encoding, SHA-256 construction, text syntax, and candidate-to-claim
   comparison requirements.  Optional JSON and Concise Binary Object
   Representation (CBOR) codecs exchange admitted Values.  Subject
   descriptions and Statement payloads have separate roles; the
   construction derives sub from the complete mapped Value, while SCITT
   provides the signed binding and transparency evidence.

	 </t>
      </abstract>
   </front>
   <seriesInfo name="Internet-Draft" value="draft-le-scitt-derived-subjects-01" />
   
</reference>
