# Cross-Reference Report: Standards Foundation of the AI Agent Ecosystem
*Generated 2026-03-03 19:59 UTC — 360 of 361 drafts analyzed, 4231 total references (2443 RFC, 698 draft, 1090 BCP)*

## Most-Referenced RFCs

These are the standards building blocks of the IETF AI/agent ecosystem.

| # | RFC | Name | Referenced By |
|--:|-----|------|-------------:|
| 1 | RFC 2119 | Key words (MUST/SHALL/MAY) | 285 drafts |
| 2 | RFC 8174 | Key words update | 237 drafts |
| 3 | RFC 8446 | TLS 1.3 | 42 drafts |
| 4 | RFC 6749 | OAuth 2.0 | 36 drafts |
| 5 | RFC 9110 | HTTP Semantics | 34 drafts |
| 6 | RFC 8126 |  | 26 drafts |
| 7 | RFC 8259 | JSON | 26 drafts |
| 8 | RFC 5280 |  | 22 drafts |
| 9 | RFC 7519 | JWT | 22 drafts |
| 10 | RFC 9052 | COSE | 20 drafts |
| 11 | RFC 8949 |  | 19 drafts |
| 12 | RFC 9528 |  | 19 drafts |
| 13 | RFC 8392 | CWT | 18 drafts |
| 14 | RFC 7515 | JWS | 16 drafts |
| 15 | RFC 9000 |  | 16 drafts |
| 16 | RFC 4648 |  | 14 drafts |
| 17 | RFC 5234 |  | 14 drafts |
| 18 | RFC 9334 |  | 14 drafts |
| 19 | RFC 3986 | URIs | 13 drafts |
| 20 | RFC 6241 |  | 13 drafts |
| 21 | RFC 8610 |  | 13 drafts |
| 22 | RFC 8615 |  | 13 drafts |
| 23 | RFC 9053 |  | 12 drafts |
| 24 | RFC 9309 |  | 12 drafts |
| 25 | RFC 5869 |  | 11 drafts |
| 26 | RFC 7252 | CoAP | 11 drafts |
| 27 | RFC 8613 |  | 11 drafts |
| 28 | RFC 8693 |  | 11 drafts |
| 29 | RFC 7950 |  | 10 drafts |
| 30 | RFC 9360 |  | 10 drafts |
| 31 | RFC 0791 |  | 9 drafts |
| 32 | RFC 1035 |  | 9 drafts |
| 33 | RFC 3339 |  | 9 drafts |
| 34 | RFC 6750 | OAuth Bearer | 9 drafts |
| 35 | RFC 6838 |  | 9 drafts |
| 36 | RFC 7030 |  | 9 drafts |
| 37 | RFC 7748 |  | 9 drafts |
| 38 | RFC 8415 |  | 9 drafts |
| 39 | RFC 8785 |  | 9 drafts |
| 40 | RFC 9449 | DPoP | 9 drafts |

### Foundation Categories

Grouping the most-referenced RFCs by function:

- **Language/Conventions** (522 total refs): RFC 2119, RFC 8174
- **Data Formats** (39 total refs): RFC 8259, RFC 3986
- **HTTP** (34 total refs): RFC 9110
- **Security/TLS** (42 total refs): RFC 8446
- **OAuth/Identity** (92 total refs): RFC 6749, RFC 6750, RFC 7519, RFC 7515, RFC 9449
- **IoT/Constrained** (49 total refs): RFC 9052, RFC 8392, RFC 7252

## Most-Referenced Drafts

These drafts are the most-cited within the AI/agent corpus itself.

| # | Draft | Referenced By |
|--:|-------|-------------:|
| 1 | draft-ietf | 44 drafts |
| 2 | draft-rosenberg-ai-protocols | 14 drafts |
| 3 | draft-ietf-cose | 8 drafts |
| 4 | draft-ietf-moq-transport | 7 drafts |
| 5 | draft-ietf-oauth | 7 drafts |
| 6 | draft-ietf-pquip | 7 drafts |
| 7 | draft-ietf-tls | 7 drafts |
| 8 | draft-ietf-core | 6 drafts |
| 9 | draft-ietf-tls-hybrid-design | 5 drafts |
| 10 | draft-irtf-nmrg-ai-challenges | 5 drafts |
| 11 | draft-ietf-ace | 4 drafts |
| 12 | draft-ietf-aipref | 4 drafts |
| 13 | draft-ietf-lake | 4 drafts |
| 14 | draft-ietf-lake-authz | 4 drafts |
| 15 | draft-ietf-lamps-kyber-certificates | 4 drafts |
| 16 | draft-ietf-moq | 4 drafts |
| 17 | draft-ietf-pquip-pqt-hybrid-terminology | 4 drafts |
| 18 | draft-irtf | 4 drafts |
| 19 | draft-irtf-nmrg | 4 drafts |
| 20 | draft-irtf-nmrg-network-digital | 4 drafts |

## Drafts With Most References (most well-connected)

| # | Draft | RFCs | Drafts | BCPs | Total |
|--:|-------|-----:|-------:|-----:|------:|
| 1 | draft-templin-intarea-aero2 | 68 | 10 | 5 | 83 |
| 2 | draft-templin-6man-aero3 | 68 | 9 | 5 | 82 |
| 3 | draft-templin-intarea-aero | 59 | 10 | 4 | 73 |
| 4 | draft-ietf-anima-constrained-voucher | 44 | 14 | 4 | 62 |
| 5 | draft-ietf-anima-brski-prm | 40 | 13 | 5 | 58 |
| 6 | draft-ietf-ace-edhoc-oscore-profile | 33 | 14 | 5 | 52 |
| 7 | draft-eggert-mailmaint-uaautoconf | 41 | 2 | 5 | 48 |
| 8 | draft-ietf-mailmaint-pacc | 39 | 2 | 5 | 46 |
| 9 | draft-mozleywilliams-dnsop-bandaid | 37 | 4 | 4 | 45 |
| 10 | draft-ietf-lamps-e2e-mail-guidance | 26 | 11 | 4 | 41 |
| 11 | draft-ietf-lake-app-profiles | 24 | 6 | 6 | 36 |
| 12 | draft-ietf-ace-coap-est-oscore | 24 | 4 | 3 | 31 |
| 13 | draft-sipos-dtn-bp-safe | 20 | 5 | 6 | 31 |
| 14 | draft-ietf-tls-deprecate-obsolete-kex | 25 | 1 | 4 | 30 |
| 15 | draft-lenders-core-dnr | 18 | 9 | 3 | 30 |
| 16 | draft-cosmos-protocol-specification | 9 | 17 | 3 | 29 |
| 17 | draft-ietf-emu-eap-edhoc | 20 | 5 | 3 | 28 |
| 18 | draft-ietf-sshm-mlkem-hybrid-kex | 12 | 12 | 4 | 28 |
| 19 | draft-ietf-lake-authz | 19 | 4 | 4 | 27 |
| 20 | draft-templin-6man-mla | 16 | 7 | 3 | 26 |

## Category-Specific RFC Dependencies

What each category builds on:

- **A2A protocols**: RFC 2119 (Key words (MUST/SHALL/MAY)), RFC 8174 (Key words update), RFC 8446 (TLS 1.3)
- **AI safety / guardrails / alignment**: RFC 2119 (Key words (MUST/SHALL/MAY)), RFC 6749 (OAuth 2.0), RFC 8174 (Key words update)
- **AI safety/alignment**: RFC 2119 (Key words (MUST/SHALL/MAY)), RFC 8174 (Key words update), RFC 7519 (JWT)
- **Agent discovery / registration**: RFC 2119 (Key words (MUST/SHALL/MAY)), RFC 8174 (Key words update), RFC 6749 (OAuth 2.0)
- **Agent discovery/reg**: RFC 2119 (Key words (MUST/SHALL/MAY)), RFC 8174 (Key words update), RFC 8446 (TLS 1.3)
- **Agent identity/auth**: RFC 2119 (Key words (MUST/SHALL/MAY)), RFC 8174 (Key words update), RFC 8446 (TLS 1.3)
- **Agent-to-agent communication protocols**: RFC 2119 (Key words (MUST/SHALL/MAY)), RFC 8174 (Key words update), RFC 6749 (OAuth 2.0)
- **Autonomous netops**: RFC 2119 (Key words (MUST/SHALL/MAY)), RFC 8174 (Key words update), RFC 6241
- **Autonomous network operations**: RFC 2119 (Key words (MUST/SHALL/MAY)), RFC 8174 (Key words update), RFC 8986
- **Data formats / semantics for AI interop**: RFC 2119 (Key words (MUST/SHALL/MAY)), RFC 8174 (Key words update), RFC 3986 (URIs)
- **Data formats/interop**: RFC 2119 (Key words (MUST/SHALL/MAY)), RFC 8174 (Key words update), RFC 8446 (TLS 1.3)
- **Human-agent interaction**: RFC 2119 (Key words (MUST/SHALL/MAY)), RFC 8174 (Key words update), RFC 9110 (HTTP Semantics)
- **Identity / authentication for AI agents**: RFC 2119 (Key words (MUST/SHALL/MAY)), RFC 8174 (Key words update), RFC 6749 (OAuth 2.0)
- **ML traffic mgmt**: RFC 2119 (Key words (MUST/SHALL/MAY)), RFC 8174 (Key words update), RFC 9110 (HTTP Semantics)
- **ML-based traffic management / optimization**: RFC 2119 (Key words (MUST/SHALL/MAY)), RFC 8174 (Key words update)
- **Model serving/inference**: RFC 2119 (Key words (MUST/SHALL/MAY)), RFC 8174 (Key words update), RFC 8345
- **Other AI/agent**: RFC 2119 (Key words (MUST/SHALL/MAY)), RFC 8174 (Key words update), RFC 8446 (TLS 1.3)
- **Policy / governance / ethical frameworks**: RFC 2119 (Key words (MUST/SHALL/MAY)), RFC 6749 (OAuth 2.0), RFC 8174 (Key words update)
- **Policy/governance**: RFC 2119 (Key words (MUST/SHALL/MAY)), RFC 8174 (Key words update), RFC 6749 (OAuth 2.0)