Governed Action Receipt (GAR): A Canonical, Verifiable Record of Policy-Governed Actions — draft-lutar-governed-action-receipt-00
Year: 2026
Type: article
Abstract: IETF individual Internet-Draft specifying the Governed Action Receipt (GAR): a compact, tamper-evident record binding actor, action, policy digest, decision outcome (closed vocabulary — UNKNOWN is never PASS), byte-level subject digests, and evidence references. Canonicalized with RFC 8785, carried in DSSE envelopes (Ed25519) or honestly unsigned under the *.unsigned.json naming convention, and linkable into append-only hash-chained logs with the tail-truncation limitation stated explicitly. The specification matches the reference implementation (szl-receipts 14.0.0, Apache-2.0) statement for statement; every worked example is computed by the library at build time and independently re-derived by the validator. idnits 2.17.1: 0 errors. Files: draft-lutar-governed-action-receipt-00.txt (rendered, 33pp), .md (kramdown source), build_draft.py, validate_draft.py.
Author: Lutar, Stephen P., Jr.
Language: English
Topic: Access Control and Trust
Subfield: Sociology and Political Science
Field: Social Sciences
Domain: Social Sciences
Open Access status: green
OpenAlex ID: W7204879593
FWCI:
Cites:
Cited by:
Related to: