%% You should probably cite draft-tsyrulnikov-rats-attested-inference-receipt-02 instead of this revision.
@techreport{tsyrulnikov-rats-attested-inference-receipt-00,
    number =    {draft-tsyrulnikov-rats-attested-inference-receipt-00},
    type =      {Internet-Draft},
    institution =   {Internet Engineering Task Force},
    publisher = {Internet Engineering Task Force},
    note =      {Work in Progress},
    url =       {https://datatracker.ietf.org/doc/draft-tsyrulnikov-rats-attested-inference-receipt/00/},
    author =    {Borys Tsyrulnikov},
    title =     {{Attested Inference Receipt (AIR): A COSE/CWT Profile for Confidential AI Inference}},
    pagetotal = 28,
    year =      2026,
    month =     mar,
    day =       1,
    abstract =  {This document defines the Attested Inference Receipt (AIR), a COSE\_Sign1 envelope carrying CWT claims profiled per the Entity Attestation Token (EAT) framework. An AIR receipt binds model identity, input/output hashes, platform attestation metadata, and operational telemetry into a single signed artifact suitable for audit, compliance, and third-party verification of a confidential AI inference event. AIR v1 targets single-inference receipts emitted by workloads running inside hardware-isolated Trusted Execution Environments (TEEs). It supports AWS Nitro Enclaves and Intel TDX measurement formats, with extension points for additional platforms. Pipeline chaining and multi-inference receipts are out of scope for this version.},
}