draft-nelson-agent-delegation-receipts

Delegation Receipt Protocol for AI Agent Authorization

groupnone stateactive pages45 rev08 expires2026-11-20 canonicalhttps://datatracker.ietf.org/doc/draft-nelson-agent-delegation-receipts/
This document defines the Delegation Receipt Protocol (DRP), a cryptographic authorization primitive for AI agent deployments. Before any agent action executes, the authorizing user signs an Authorization Object containing scope boundaries, time window, operator instruction hash, and model state commitment. This signed receipt is published to an append-only log before the agent runtime receives control. The protocol removes the operator as a trusted third party by making the user's private key the sole signing authority over the delegation record.