<?xml version="1.0" encoding="UTF-8"?>
<reference anchor="I-D.tsyrulnikov-rats-attested-inference-receipt" target="https://datatracker.ietf.org/doc/html/draft-tsyrulnikov-rats-attested-inference-receipt-00">
   <front>
      <title>Attested Inference Receipt (AIR): A COSE/CWT Profile for Confidential AI Inference</title>
      <author initials="B." surname="Tsyrulnikov" fullname="Borys Tsyrulnikov">
         <organization>Cyntrisec</organization>
      </author>
      <date month="March" day="1" year="2026" />
      <abstract>
	 <t>   This document defines the Attested Inference Receipt (AIR), a
   COSE_Sign1 envelope carrying CWT claims profiled per the Entity
   Attestation Token (EAT) framework.  An AIR receipt binds model
   identity, input/output hashes, platform attestation metadata, and
   operational telemetry into a single signed artifact suitable for
   audit, compliance, and third-party verification of a confidential AI
   inference event.

   AIR v1 targets single-inference receipts emitted by workloads running
   inside hardware-isolated Trusted Execution Environments (TEEs).  It
   supports AWS Nitro Enclaves and Intel TDX measurement formats, with
   extension points for additional platforms.  Pipeline chaining and
   multi-inference receipts are out of scope for this version.

	 </t>
      </abstract>
   </front>
   <seriesInfo name="Internet-Draft" value="draft-tsyrulnikov-rats-attested-inference-receipt-00" />
   
</reference>
