AAuth — Agent Identity and Authorization Protocol (draft-hardt-oauth-aauth-protocol)

An IETF Internet-Draft from Dick Hardt, one of the authors of OAuth 2.0, that gives every agent its own keypair and its own portable identifier of the form aauth:local@domain, then lets it authenticate to a resource it has never registered with by signing the HTTP request itself. It replaces the shared client secret with HTTP Message Signatures over Ed25519, replaces the pre-registered client with four /.well-known/aauth-*.json metadata documents, and adds a mid-task consent round trip — a 401 carrying an AAuth-Requirement header — so a person can approve an access a resource asks for while the agent is already running. It does not replace OAuth; it covers the agent-to-resource case OAuth’s compile-time client model was never built for.