@techreport{nelson-agent-delegation-receipts-09, number = {draft-nelson-agent-delegation-receipts-09}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-nelson-agent-delegation-receipts/09/}, author = {Ryan Nelson}, title = {{Delegation Receipt Protocol for AI Agent Authorization}}, pagetotal = 72, year = 2026, month = may, day = 22, abstract = {This document defines the Delegation Receipt Protocol (DRP), a cryptographic authorization primitive for AI agent deployments. Before any agent action executes, the authorizing user signs an Authorization Object containing scope boundaries, time window, operator instruction hash, and model state commitment. This signed receipt is published to an append-only log before the agent runtime receives control. The protocol reduces reliance on the operator as a trusted intermediary by making the user's private key the sole signing authority over the delegation record.}, }