@techreport{izmaylov-agent-permission-receipts-01,
    number =    {draft-izmaylov-agent-permission-receipts-01},
    type =      {Internet-Draft},
    institution =   {Internet Engineering Task Force},
    publisher = {Internet Engineering Task Force},
    note =      {Work in Progress},
    url =       {https://datatracker.ietf.org/doc/draft-izmaylov-agent-permission-receipts/01/},
    author =    {Pavel Izmaylov},
    title =     {{Signed Permissions and Action Receipts for Automated Agents}},
    pagetotal = 46,
    year =      2026,
    month =     oct,
    day =       24,
    abstract =  {This document specifies records with which a third party can establish, later and without network access, what an automated agent, such as an artificial intelligence (AI) agent, was permitted to do and what it recorded doing. The person for whom the agent acts, the principal, signs a permission with a passkey; the permission carries limits that a verifier can check mechanically. The agent signs a receipt for each action with Ed25519 and the Module-Lattice-Based Digital Signature Algorithm (ML-DSA-87). Receipts are chained and entered in a log whose signed tree heads are time-stamped. A verifier reports, separately, whether the records are sound and whether each recorded action stayed within its permission. The content of each record is specified independently of its encoding; one encoding, JSON Web Signature (JWS) over canonical JavaScript Object Notation (JSON), is defined.},
}