<?xml version="1.0" encoding="UTF-8"?>
<reference anchor="I-D.zambo-aer1" target="https://datatracker.ietf.org/doc/html/draft-zambo-aer1-06">
   <front>
      <title>AER-1: A Portable Execution Receipt for AI Agent Tool Calls</title>
      <author initials="B." surname="Zambo" fullname="Brennan Zambo">
         <organization>Zambo</organization>
      </author>
      <date month="September" day="30" year="2026" />
      <abstract>
	 <t>   This document specifies AER-1, a small vocabulary for recording one
   AI agent tool call as a portable, independently checkable execution
   receipt.  A receipt identifies the execution, records when it
   happened, preserves the canonical bytes used for the output
   commitment, names the tool and caller scope, carries a provenance
   class, and resolves at a stable public URL.  The format separates
   what the system observed from claims about the outside world, and it
   separates provenance (who ran or reported the action) from the record
   itself.  A reference implementation is deployed, and its receipts are
   publicly verifiable without an account or token.  This revision adds
   workflow receipts: a verifiable record that binds an ordered
   sequence of step receipts to a single goal, with a Merkle root over
   the step sequence for tamper evidence.  The worked workflow
   example&#x27;s Merkle root is computed with the Section 8.1 leaf
   construction.

	 </t>
      </abstract>
   </front>
   <seriesInfo name="Internet-Draft" value="draft-zambo-aer1-06" />
   
</reference>
