Document changes urn:uuid:9906fe1d-f225-5970-92ed-7f0b2ee13c07 2026-07-18T03:19:29.254824+00:00 urn:datatracker-ietf-org:event:1208824 2026-07-16T14:19:32.661314+00:00 2026-07-16T14:19:32.661314+00:00 (System) RPC status changed to ref_checker from formatting changed_rpc_assignments ietf scitt Amaury Chamayou Deb Cooley active rfcedack reviewers-ok changed rfcqueue in_progress sub-pub urn:datatracker-ietf-org:event:1207181 2026-07-06T23:59:15.042994+00:00 2026-07-06T23:59:15.042994+00:00 Nobuo Aoki New version available: <b>draft-nobuo-scitt-composite-evidence-verification-00.txt</b> new_revision none active idexists This document defines a common model for composite verification of SCITT statement graphs. A composite verifier checks a set of SCITT Signed Statements, receipts, object bindings, and relationship edges under a named verification profile. The result is a structured report that can say which statements passed, which evidence is missing, which evidence is stale, and which statements conflict. The model is intended for verifiers, auditors, deployment controllers, update services, and other relying-party tools. It is not a new Transparency Service requirement. It does not define a universal supply-chain policy language and does not define the payload format of any statement type. 00 urn:datatracker-ietf-org:event:1207180 2026-07-06T23:59:15.039595+00:00 2026-07-06T23:59:15.039595+00:00 Nobuo Aoki New version approved new_submission none active idexists urn:datatracker-ietf-org:event:1207177 2026-07-06T23:59:08.963665+00:00 2026-07-06T23:59:08.963665+00:00 Nobuo Aoki New version available: <b>draft-nobuo-scitt-protected-object-binding-00.txt</b> new_revision none active idexists This document defines a small common model for relating Supply Chain Integrity, Transparency, and Trust (SCITT) Signed Statements to the supply-chain objects that those statements describe, measure, authorize, revoke, or audit. The model can be used for software artifacts, firmware artifacts, hardware components, device instances, cloud compute resources, and other objects that appear in supply- chain evidence. The document also defines a relationship vocabulary and an optional Statement Graph Manifest. These parts help verifiers connect heterogeneous SCITT statements without requiring SCITT to define the payload formats of those statements. This document does not define SBOM, HBOM, CBOM, attestation, audit, vulnerability, or regulatory payload formats. It only defines a common binding and graph layer around SCITT statements and receipts. 00 urn:datatracker-ietf-org:event:1207176 2026-07-06T23:59:08.960277+00:00 2026-07-06T23:59:08.960277+00:00 Nobuo Aoki New version approved new_submission none active idexists urn:datatracker-ietf-org:event:1207165 2026-07-06T23:58:34.738286+00:00 2026-07-06T23:58:34.738286+00:00 Nobuo Aoki New version available: <b>draft-nobuo-scitt-hardware-iot-cloud-use-cases-00.txt</b> new_revision none active idexists This document describes how SCITT can be applied to supply chains that include hardware components, IoT devices, firmware, cloud compute resources, confidential-computing environments, accelerators, and related operational evidence. It gives use cases and scope guidance. It also explains how SCITT can work with RATS, COSE, TCG technologies, SBOM, HBOM, CBOM, and cloud attestation systems without replacing those technologies. This document is informational. It does not define hardware assurance rules, cloud assurance rules, device identity systems, manufacturing requirements, or payload formats. Its purpose is to show where SCITT statements and receipts can provide transparency for heterogeneous supply-chain evidence, and where other standards or domain profiles should remain responsible. 00 urn:datatracker-ietf-org:event:1207164 2026-07-06T23:58:34.734664+00:00 2026-07-06T23:58:34.734664+00:00 (System) New version approved new_submission none active idexists urn:datatracker-ietf-org:event:1207179 2026-07-06T23:55:45.764734+00:00 2026-07-06T23:55:45.764734+00:00 Nobuo Aoki Request for posting confirmation emailed to submitter and authors: Nobuo Aoki <n_aoki@ieee.org> new_submission none active idexists urn:datatracker-ietf-org:event:1207178 2026-07-06T23:55:24.650017+00:00 2026-07-06T23:55:24.650017+00:00 Nobuo Aoki Uploaded new revision new_submission none active idexists urn:datatracker-ietf-org:event:1207175 2026-07-06T23:54:36.209971+00:00 2026-07-06T23:54:36.209971+00:00 Nobuo Aoki Request for posting confirmation emailed to submitter and authors: Nobuo Aoki <n_aoki@ieee.org> new_submission none active idexists urn:datatracker-ietf-org:event:1207174 2026-07-06T23:53:50.239997+00:00 2026-07-06T23:53:50.239997+00:00 Nobuo Aoki Uploaded new revision new_submission none active idexists urn:datatracker-ietf-org:event:1207163 2026-07-06T23:51:44.837076+00:00 2026-07-06T23:51:44.837076+00:00 Nobuo Aoki Request for posting confirmation emailed to submitter and authors: Nobuo Aoki <n_aoki@ieee.org> new_submission none active idexists urn:datatracker-ietf-org:event:1207162 2026-07-06T23:51:00.726760+00:00 2026-07-06T23:51:00.726760+00:00 Nobuo Aoki Uploaded new revision new_submission none active idexists urn:datatracker-ietf-org:event:1206995 2026-07-06T23:02:32.823637+00:00 2026-07-06T23:02:32.823637+00:00 Jamie Reyes Posted related IPR disclosure <b>Steven Walter Mih's Statement about IPR related to draft-mih-scitt-agent-action-capsule</b> posted_related_ipr none active idexists urn:datatracker-ietf-org:event:1206994 2026-07-06T23:02:14.392692+00:00 2026-07-06T23:02:14.392692+00:00 Jamie Reyes Posted related IPR disclosure <b>Steven Walter Mih's Statement about IPR related to draft-mih-scitt-agent-action-capsule</b> posted_related_ipr none active idexists urn:datatracker-ietf-org:event:1206993 2026-07-06T23:02:01.880747+00:00 2026-07-06T23:02:01.880747+00:00 Jamie Reyes Posted related IPR disclosure <b>Steven Walter Mih's Statement about IPR related to draft-mih-scitt-agent-action-capsule</b> posted_related_ipr none active idexists urn:datatracker-ietf-org:event:1206992 2026-07-06T23:01:12.312069+00:00 2026-07-06T23:01:12.312069+00:00 Jamie Reyes Posted related IPR disclosure <b>Steven Walter Mih's Statement about IPR related to draft-mih-scitt-agent-action-capsule</b> posted_related_ipr none active idexists urn:datatracker-ietf-org:event:1206834 2026-07-06T21:58:02+00:00 2026-07-06T21:58:02+00:00 (System) IANA Action state changed to <b>RFC-Ed-Ack</b> from Waiting on RFC Editor changed_state ietf scitt Amaury Chamayou Deb Cooley active rfcedack reviewers-ok changed rfcqueue in_progress sub-pub urn:datatracker-ietf-org:event:1206574 2026-07-06T19:49:04.071068+00:00 2026-07-06T19:49:04.071068+00:00 Steven Mih New version available: <b>draft-mih-scitt-agent-action-capsule-02.txt</b> new_revision none active idexists This document defines a SCITT statement profile for recording what an AI agent did: the Agent Action Capsule. A Capsule is a digest- committed record of one agent action carrying its verdict-level disposition (executed, blocked, denied, errored, timed out), the deterministic constraints that were evaluated, the effect that was committed together with a confirmed-effect binding that distinguishes a dispatched attempt from an observed result, and an honest human-in- the-loop flag. Capsules are expressed as SCITT Signed Statements (COSE_Sign1) and made transparent by registration in a SCITT Transparency Service. A Capsule is recorded on every verdict, including refusals: a blocked or denied Capsule is the auditor-grade evidence that a gate worked. 02 urn:datatracker-ietf-org:event:1206573 2026-07-06T19:49:04.067569+00:00 2026-07-06T19:49:04.067569+00:00 Steven Mih New version accepted (logged-in submitter: Steven Mih) new_submission none active idexists urn:datatracker-ietf-org:event:1206572 2026-07-06T19:49:04.007675+00:00 2026-07-06T19:49:04.007675+00:00 Steven Mih Uploaded new revision new_submission none active idexists urn:datatracker-ietf-org:event:1204680 2026-07-04T20:29:29.154124+00:00 2026-07-04T20:29:29.154124+00:00 RAMPALLI Karthik New version available: <b>draft-rampalli-scitt-capsule-provenance-binding-00.txt</b> new_revision none active idexists The Agent Action Capsule (AAC) profile (draft-mih-scitt-agent-action- capsule) records what an autonomous agent actually did -- executed, blocked, denied, errored, or timed out -- with a structural binding that prevents an attempt from being presented as a completion. AAC deliberately does not define the authority that permitted an action; it carries that authority as an opaque reference. Two companion profiles supply what that reference can point to: a per-action authorization profile (draft-rampalli-aiagent-authz-hmac) records that an action was permitted (the "may"), and a memory-provenance profile (draft-rampalli-aiagent-memory-provenance) records the source and trust state of the belief on which the agent acted (the "why- believed"). This document specifies how the latter two are bound into an AAC Capsule. It defines (a) what the AAC "disposition.authority" reference MAY resolve to, (b) a namespaced, payload-only extension carrying an authorization-token reference, a memory chain root, and a quarantine attestation, and (c) an OPTIONAL divergence-class value, drawn from the per-action profile, that explains a non-executing AAC verdict. The binding uses only mechanisms AAC already provides -- the opaque authority reference and the payload-extension namespacing convention -- and changes neither AAC's closed protected-header claim set nor its Class 1 verification. The result is a single verifiable record that answers "may," "did," and "why-believed" together. 00 urn:datatracker-ietf-org:event:1204679 2026-07-04T20:29:29.150795+00:00 2026-07-04T20:29:29.150795+00:00 RAMPALLI Karthik New version accepted (logged-in submitter: RAMPALLI Karthik) new_submission none active idexists urn:datatracker-ietf-org:event:1204678 2026-07-04T20:27:50.503117+00:00 2026-07-04T20:27:50.503117+00:00 RAMPALLI Karthik Uploaded new revision new_submission none active idexists