@techreport{aravind-oauth-decision-subject-00, number = {draft-aravind-oauth-decision-subject-00}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-aravind-oauth-decision-subject/00/}, author = {Anivar A Aravind}, title = {{Decision-Subject Representation for Agent Authorization}}, pagetotal = 15, year = 2026, month = jul, day = 19, abstract = {This document defines dsub, an OPTIONAL, descriptive claim naming the *decision subject*, the party an automated agent's action is taken \_upon\_, as distinct from the acting agent (act) and the delegating principal (sub). Its purpose is *audit legibility*: letting a record name the party a decision concerns, which is the precondition for that record ever being made legible to them. The claim is privacy- minimizing by construction and is NOT an input to the authorization decision; a Policy Decision Point MUST ignore it. This document defines representation only.}, }