draft-condrey-rats-witnessd-enrollment

Trust Anchor Bootstrap Protocol for Proof of Process

groupnone stateactive pages13 rev00 expires2026-08-11 canonicalhttps://datatracker.ietf.org/doc/draft-condrey-rats-witnessd-enrollment/
This document specifies a trust anchor bootstrap protocol for the witnessd Proof of Process framework. The protocol defines how new devices enter the witnessd ecosystem, how device keys are provisioned and verified, and how Verifiers discover and validate device trust anchors. Three enrollment modes are defined: self-sovereign mode for individual users, organizational mode for enterprise deployments, and public registry mode for federated trust ecosystems.