@techreport{jiang-oauth-intent-admission-00,
    number =    {draft-jiang-oauth-intent-admission-00},
    type =      {Internet-Draft},
    institution =   {Internet Engineering Task Force},
    publisher = {Internet Engineering Task Force},
    note =      {Work in Progress},
    url =       {https://datatracker.ietf.org/doc/draft-jiang-oauth-intent-admission/00/},
    author =    {Yuning Jiang and LUN LI and Yurong Song and Faye Liu},
    title =     {{Intent Admission Assertions for Agentic Systems}},
    pagetotal = 17,
    year =      2026,
    month =     jun,
    day =       23,
    abstract =  {In agentic systems, an intent expressed by a user, application, or agent may be forwarded to a remote system that triggers high-impact actions. If the originator of an intent is not authenticated, is not authorized to request the targeted action, or has not obtained the required consent, the receiving system may act on a forged or unauthorized intent. This document defines the Intent Admission Assertion (IAA): a signed, verifiable artifact by which an admission point authenticates an intent originator, authorizes the request against a permission policy, gates consent-required actions on explicit consent from the user or resource owner, and conveys the result to a downstream execution endpoint that re-verifies it before acting. The IAA is a JSON Web Token whose admission decision is expressed using Rich Authorization Requests (RFC 9396).},
}