<?xml version="1.0" encoding="UTF-8"?>
<reference anchor="I-D.schrock-ep-bounded-execution-program" target="https://datatracker.ietf.org/doc/html/draft-schrock-ep-bounded-execution-program-00">
   <front>
      <title>Bounded Execution Programs for Consequential Agent Actions</title>
      <author initials="I." surname="Schrock" fullname="Iman Schrock">
         <organization>EMILIA Protocol, Inc.</organization>
      </author>
      <date month="August" day="2" year="2026" />
      <abstract>
	 <t>   An authorization for one action does not by itself authorize an open-
   ended agent plan.  This document defines an Experimental profile for
   a signed, finite, versioned directed acyclic graph of consequential
   action occurrences.  The program binds a total retained-history
   ceiling.  Each node binds an exact action or a pinned action-matching
   profile, an action- specific Trust Program, outcome-specific
   dependencies, an occurrence ceiling, and fixed charges against
   aggregate attempt budgets.

   A conforming program-aware admission store evaluates reachability and
   budgets in the same linearizable transaction domain as the ordinary
   one-time execution right.  It uses store-owned authorizer trust
   roots, clock, authenticated profile-match verification, and current
   program status; seals a deterministic execution-program resource into
   the AdmissionSnapshot; and fences the program&#x27;s independent
   authorization digest against ordinary-path admission.  The profile
   does not establish that natural-language intent was understood, that
   a plan is safe or lawful, that provider or effect evidence is true,
   or that every mutation path was mediated.

	 </t>
      </abstract>
   </front>
   <seriesInfo name="Internet-Draft" value="draft-schrock-ep-bounded-execution-program-00" />
   
</reference>
