%% You should probably cite draft-marques-asqav-compliance-receipts-07 instead of this revision.
@techreport{marques-asqav-compliance-receipts-00,
    number =    {draft-marques-asqav-compliance-receipts-00},
    type =      {Internet-Draft},
    institution =   {Internet Engineering Task Force},
    publisher = {Internet Engineering Task Force},
    note =      {Work in Progress},
    url =       {https://datatracker.ietf.org/doc/draft-marques-asqav-compliance-receipts/00/},
    author =    {João André Gomes Marques},
    title =     {{Compliance Profile of Signed Action Receipts for AI Agents}},
    pagetotal = 21,
    year =      2026,
    month =     may,
    day =       4,
    abstract =  {This document defines a compliance profile of the signed action receipt format used by AI agents to record machine-readable evidence of access-control decisions. The profile binds receipt fields to the operational record-keeping obligations of Articles 12 and 26 of Regulation (EU) 2024/1689 (the EU AI Act) and to the ICT-related incident management requirements of Article 17 of Regulation (EU) 2022/2554 (DORA). It does not redefine the wire format, the canonicalization rule, or the signing algorithms of the underlying receipt format. It tightens a subset of the OPTIONAL fields to REQUIRED, imposes a retention floor, mandates two-anchor timestamping, and adds two extension fields.},
}