@techreport{tonyai-a2a-trust-03,
    number =    {draft-tonyai-a2a-trust-03},
    type =      {Internet-Draft},
    institution =   {Internet Engineering Task Force},
    publisher = {Internet Engineering Task Force},
    note =      {Work in Progress},
    url =       {https://datatracker.ietf.org/doc/draft-tonyai-a2a-trust/03/},
    author =    {Tony Trujillo (tonyai)},
    title =     {{Agent-to-Agent Trust, Identity, and Verifiable Provenance}},
    pagetotal = 57,
    year =      2026,
    month =     sep,
    day =       4,
    abstract =  {This document defines a trust model for agent-to-agent (A2A) interactions in multi-agent AI systems. It specifies how agents obtain verifiable identities via CA-signed templates, how spawn chains are cryptographically established and validated, how dynamic policies are governed under a dual-signature model, and how cross- organizational agent interactions are explicitly authorized. The model applies existing PKI primitives (X.509, CRL, CSR) and established identity patterns (OAuth 2.0, On-Behalf-Of) to the problem of agent provenance. This document does not address agent- to-resource access control, human-in-the-loop orchestration, or agent behavior, as those concerns belong to the resource enforcement layer and the orchestration layer respectively.},
}