@techreport{durga-agenttrust-trace-verification-00, number = {draft-durga-agenttrust-trace-verification-00}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-durga-agenttrust-trace-verification/00/}, author = {Raghuvar Karthik Durga}, title = {{Cryptographic Execution-Trace Verification, JCS Canonicalization, and Fail-Closed Delegation Attestation for Autonomous AI Agents}}, pagetotal = 5, year = 2026, month = oct, day = 29, abstract = {This document specifies a deterministic cryptographic verification profile for execution traces, delegation chains, and weight-custody manifests generated by autonomous artificial intelligence (AI) agents operating across Model Context Protocol (MCP), Agent-to-Agent (A2A), and enterprise system-of-record boundaries. The profile binds JSON Canonicalization Scheme (JCS, RFC 8785) pre-image serialization, Ed25519 (RFC 8032) and ECDSA P-256/P-384 signatures, JSON Web Key (JWK, RFC 7517) thumbprint pinning, and fail-closed revocation and freshness checks so that relying parties can independently verify whether an agent action was authorized prior to commit.}, }