draft-kuehlewind-audit-architecture

An Architecture for Auditing AI Agent Delegation and Interactions

groupnone stateactive pages22 rev00 expires2026-11-19 canonicalhttps://datatracker.ietf.org/doc/draft-kuehlewind-audit-architecture/
This document describes an architecture for auditing of agent-driven interactions on the Internet. Autonomous and semi-autonomous software agents, including those based on artificial intelligence, increasingly act on behalf of users, organizations, and services. Existing auditing mechanisms often capture isolated system events but do not consistently represent delegation relationships, user intent, or evolving authorization. In agent-driven systems, auditability requires linking intent, delegation, authorization, and execution. The proposed architecture enables this through distributed audit record generation, propagation of audit context, optional attestation, and additonal logging for transparency.