<?xml version="1.0" encoding="UTF-8"?>
<reference anchor="I-D.sato-soos-cap" target="https://datatracker.ietf.org/doc/html/draft-sato-soos-cap-00">
   <front>
      <title>The Constitutional AI Protocol (CAP) for Agentic AI Systems</title>
      <author initials="" surname="Sato" fullname="Tom Sato">
         <organization>MyAuberge K.K.</organization>
      </author>
      <date month="May" day="17" year="2026" />
      <abstract>
	 <t>   This document specifies the Constitutional AI Protocol (CAP), a
   kernel-enforced prohibition architecture for agentic AI systems.
   CAP defines a three-tier prohibition model: Tier 0 absolute
   prohibitions derived from near-universal treaty consensus, Tier 1
   jurisdiction-specific prohibitions declared by operators and
   verified by auditors, and Tier 2 voluntary operator ethical
   standards.  CAP evaluates every action request twice -- once on the
   AI agent&#x27;s action before Cedar policy evaluation, and once on the
   human principal&#x27;s decision before kernel execution -- ensuring that
   neither agents nor human principals can authorize absolutely
   prohibited actions.  This document also specifies Jurisdictional
   Conflict Resolution (JCR), the mechanism by which the kernel
   surfaces irreconcilable jurisdictional conflicts to human principals
   via the Human Escalation Mechanism [I-D.sato-soos-hem].

	 </t>
      </abstract>
   </front>
   <seriesInfo name="Internet-Draft" value="draft-sato-soos-cap-00" />
   
</reference>
