@techreport{jiang-wimse-heterogeneous-credential-01,
    number =    {draft-jiang-wimse-heterogeneous-credential-01},
    type =      {Internet-Draft},
    institution =   {Internet Engineering Task Force},
    publisher = {Internet Engineering Task Force},
    note =      {Work in Progress},
    url =       {https://datatracker.ietf.org/doc/draft-jiang-wimse-heterogeneous-credential/01/},
    author =    {Yuning Jiang and Wangdonghui and Yurong Song and Faye Liu},
    title =     {{Heterogeneous Credential Verification for Workload and Agentic Systems}},
    pagetotal = 16,
    year =      2026,
    month =     jun,
    day =       30,
    abstract =  {Workloads in multi-system environments, including AI agents acting on behalf of users and organizations, increasingly present multiple credentials of heterogeneous types within a single request: workload identity tokens, user-delegated OAuth access tokens, W3C Verifiable Presentations, X.509 certificates, or platform-specific API keys. These are issued by different authorities, follow different formats, are verified by different verifiers, and carry different assurance semantics. A relying party that receives such a heterogeneous credential set has no common way to represent the set, identify each credential's type, determine the authoritative verifier for it, interpret verification results consistently, or combine multiple results into a single handling decision. This document defines a mechanism for processing a heterogeneous credential set on receipt. It specifies a representation of the credential set, a procedure for identifying each credential's type and determining its verifier, a minimal common model for verification results that lets results from different verifiers be compared, and a policy model that combines multiple results into one handling decision. The mechanism is transport-agnostic and does not constrain where the processing functions are deployed.},
}