draft-sato-soos-gar

The Governance Audit Record (GAR) for Agentic AI Systems

groupnone stateactive pages17 rev00 expires2026-11-18 canonicalhttps://datatracker.ietf.org/doc/draft-sato-soos-gar/
This document specifies the Governance Audit Record (GAR), the audit architecture for agentic AI systems. GAR defines five audit types, the Session Audit Record (SAR), the Audit Alert system, auditor principal categories, and the Audit Package for external regulatory inspection. GAR provides verifiable evidence that AI agent sessions were governed in accordance with the Intent Declaration Primitive [I-D.sato-soos-idp] and the Human Escalation Mechanism [I-D.sato-soos-hem]. GAR answers the governance question: can any of this be proven to a regulator?