@techreport{mcguinness-oauth-client-instance-id-01,
    number =    {draft-mcguinness-oauth-client-instance-id-01},
    type =      {Internet-Draft},
    institution =   {Internet Engineering Task Force},
    publisher = {Internet Engineering Task Force},
    note =      {Work in Progress},
    url =       {https://datatracker.ietf.org/doc/draft-mcguinness-oauth-client-instance-id/01/},
    author =    {Karl McGuinness},
    title =     {{OAuth 2.0 Client Instance Identifiers}},
    pagetotal = 32,
    year =      2026,
    month =     nov,
    day =       2,
    abstract =  {This specification defines an optional claims profile of OAuth 2.0 Attestation-Based Client Authentication. When selected, the profile requires an attester-assigned client instance identifier, scoped by default to the server that validates it, that remains stable across verified key changes, and adds continuity and privacy rules for that identifier. Conveying instance context in tokens and introspection responses remains optional within the profile. Authentication and proof methods follow the base specification.},
}