Files
ietf-draft-analyzer/data/reports/gaps.md
Christian Nennemann a46a01bd8c Add auto-heal pipeline command and fix multi-source draft processing
- Add `ietf auto` command: fetches, analyzes, embeds, extracts ideas,
  and refreshes gaps across all sources with cost-based auto-approval
- Fix SourceDocument→Draft conversion in auto fetch step
- Fix gap_analysis method name in auto command
- Process all 270 unrated ETSI/ISO/ITU/NIST drafts (761 total, all rated)
- Update web UI templates and data layer for multi-source support

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-08 18:41:42 +01:00

38 KiB

Gap Analysis: IETF AI/Agent Draft Landscape

Generated 2026-03-08 17:16 UTC — analyzing 756 drafts, 501 technical ideas

Overview

This report identifies 11 gaps — areas, problems, or technical challenges not adequately addressed by the current 756 IETF AI/agent drafts. Each gap is cross-referenced with related drafts and extracted technical ideas to show partial coverage.

Severity Count
CRITICAL 3
HIGH 5
MEDIUM 3

Safety Deficit

Only 112 of 756 drafts address AI safety/alignment, while 157 focus on A2A protocols and 124 on autonomous operations. The ratio of capability-building to safety is roughly 2:1.


Severity CRITICAL
Category policy/governance
Drafts in category 214

No standard addresses who is legally responsible when autonomous agents cause harm or make binding commitments. Current frameworks focus on technical risk but ignore liability assignment between agent creators, operators, and users.

Evidence: Real-world AI agent deployments are stalled due to unclear liability chains, especially in financial and healthcare domains

Keyword matches (drafts mentioning gap topic):

Top-rated in policy/governance (214 drafts):

  • draft-cowles-volt (4.8) — Defines tamper-evident execution trace format for AI agent workflows using hash chains and cryptogra
  • draft-aylward-daap-v2 (4.8) — Defines comprehensive protocol for AI agent accountability including authentication, monitoring, and
  • itu-t-y-3172 (4.7) — Establishes comprehensive architectural framework for machine learning deployment in future networks
  • iso-iec-22989-2022 (4.7) — ISO/IEC standard defining core AI concepts and establishing standardized terminology across the fiel
  • iso-iec-42001-2023 (4.6) — ISO/IEC standard establishing comprehensive AI management system requirements covering governance, r

Partially Addressing Ideas

51 extracted ideas touch on this gap:

Idea Draft Type
Structured Responsibility and Traceability Architecture draft-takagi-srta-trinity architecture
Intelligent Agent Communication Gateway Architecture draft-agent-gw architecture
Tiered Risk-Based Governance for Autonomous AI Agents draft-aylward-aiga-1 architecture
Tiered Risk-Based Governance for Autonomous AI Agents draft-aylward-aiga-2 architecture
Distributed AI Accountability Protocol draft-aylward-daap-v2 protocol
Zero Trust Runtime Agent Architecture draft-berlinai-vera architecture
Agentic Hypercall Protocol draft-campbell-agentic-http pattern
Context Distribution Optimization Framework draft-chang-agent-context-interaction mechanism

...and 43 more


2. Agent Capability Degradation Detection

Severity CRITICAL
Category AI safety/alignment
Drafts in category 112

No standard defines how to detect when an agent's capabilities are degrading due to concept drift, adversarial inputs, or model corruption. Current monitoring focuses on system metrics not capability assessment.

Evidence: Production AI systems show gradual performance degradation that goes undetected until major failures occur

Keyword matches (drafts mentioning gap topic):

Top-rated in AI safety/alignment (112 drafts):

  • draft-cowles-volt (4.8) — Defines tamper-evident execution trace format for AI agent workflows using hash chains and cryptogra
  • draft-aylward-daap-v2 (4.8) — Defines comprehensive protocol for AI agent accountability including authentication, monitoring, and
  • draft-guy-bary-stamp-protocol (4.6) — Defines STAMP protocol for cryptographic delegation and proof in AI agent systems. Provides task-bou
  • draft-drake-email-tpm-attestation (4.6) — Defines hardware attestation for email using TPM verification chains to prevent spam and provide Syb
  • iso-iec-42001-2023 (4.6) — ISO/IEC standard establishing comprehensive AI management system requirements covering governance, r

Partially Addressing Ideas

22 extracted ideas touch on this gap:

Idea Draft Type
Intelligent Agent Communication Gateway Architecture draft-agent-gw architecture
AI-Native Network Protocol (AINP) draft-ainp-protocol protocol
Agentic Data Optimization Layer (ADOL) draft-chang-agent-token-efficient protocol
Structured OAuth Scope Syntax for Agent Permissions draft-chen-oauth-scope-agent-extensions extension
Capability-based Agent Discovery Mechanism draft-cui-ai-agent-discovery-invocation mechanism
Intent-based Agent Selection draft-cui-ai-agent-discovery-invocation extension
Agent Attachment Protocol draft-dunbar-agent-attachment protocol
EAT Extensions for Agent Capability Attestation draft-huang-rats-agentic-eat-cap-attest extension

...and 14 more


3. Emergency Agent Override Protocols

Severity CRITICAL
Category AI safety/alignment
Drafts in category 112

No standard defines how to safely emergency-stop or override autonomous agents across distributed systems when they exhibit dangerous behavior. Current approaches assume centralized control that may not exist.

Evidence: Incidents with autonomous trading systems and industrial controls show need for fail-safe override mechanisms

Keyword matches (drafts mentioning gap topic):

Top-rated in AI safety/alignment (112 drafts):

  • draft-cowles-volt (4.8) — Defines tamper-evident execution trace format for AI agent workflows using hash chains and cryptogra
  • draft-aylward-daap-v2 (4.8) — Defines comprehensive protocol for AI agent accountability including authentication, monitoring, and
  • draft-guy-bary-stamp-protocol (4.6) — Defines STAMP protocol for cryptographic delegation and proof in AI agent systems. Provides task-bou
  • draft-drake-email-tpm-attestation (4.6) — Defines hardware attestation for email using TPM verification chains to prevent spam and provide Syb
  • iso-iec-42001-2023 (4.6) — ISO/IEC standard establishing comprehensive AI management system requirements covering governance, r

Partially Addressing Ideas

15 extracted ideas touch on this gap:

Idea Draft Type
LLM-Enhanced Autonomic Service Agent Architecture draft-han-anima-ai-asa architecture
Multipath Traffic Engineering Capabilities Advertisement draft-kompella-lsr-mptecap mechanism
Agent Collaboration Protocols Architecture draft-liu-dmsc-acps-arc architecture
Agent Lifecycle Support draft-liu-dmsc-acps-arc protocol
Zero Trust Interoperability Framework draft-liu-saag-zt-problem-statement requirement
Cross-device Communication Protocol Gap Analysis for Network AI Agents draft-mao-rtgwg-agent-comm-protocol-gap-analysis requirement
Comparative analysis of messaging protocols for agentic AI draft-mpsb-agntcy-messaging pattern
Cross-Device Communication Framework for Network AI Agents draft-mzsg-rtgwg-agent-cross-device-comm-framework architecture

...and 7 more


4. Cross-Domain Agent Identity Portability

Severity HIGH
Category agent identity/auth
Drafts in category 160

Agents cannot maintain consistent identity across different organizational domains or standards bodies' protocols. IETF defines authentication within network boundaries while ISO focuses on domain-specific identity, creating fragmentation.

Evidence: Enterprise deployments require agents to work across cloud providers, on-premises systems, and partner networks with different identity systems

Keyword matches (drafts mentioning gap topic):

Top-rated in agent identity/auth (160 drafts):

Partially Addressing Ideas

33 extracted ideas touch on this gap:

Idea Draft Type
Cross-Domain Agent Interoperability Framework draft-cui-dmsc-agent-cdi architecture
Cross-Domain Authorization Information Sharing for Multi-Agent Systems draft-diaconu-agents-authz-info-sharing mechanism
Agent Authorization Profile for OAuth 2.0 draft-aap-oauth-profile extension
SCIM 2.0 Extension for Agents and Agentic Applications draft-abbey-scim-agent-extension extension
Distributed AI Accountability Protocol draft-aylward-daap-v2 protocol
Intent-Based Just-in-Time Authorization draft-chen-agent-decoupled-authorization-model architecture
Dynamic Behavior-Based Authentication and Authorization Requirements draft-chen-ai-agent-auth-new-requirements requirement
Agentic network architecture for multi-agent coordination draft-chuyi-nmrg-agentic-network-inference architecture

...and 25 more


5. Real-Time Agent Behavior Explanation

Severity HIGH
Category human-agent interaction
Drafts in category 57

No standard defines how autonomous agents should provide real-time explanations of their decision-making to humans during operation. Current explainable AI frameworks are post-hoc rather than interactive.

Evidence: Regulatory requirements emerging in EU AI Act and similar legislation demand real-time explainability for high-risk AI systems

Keyword matches (drafts mentioning gap topic):

Top-rated in human-agent interaction (57 drafts):

  • draft-drake-email-tpm-attestation (4.6) — Defines hardware attestation for email using TPM verification chains to prevent spam and provide Syb
  • iso-37181-2022 (4.5) — Establishes guidelines for introducing and organizing autonomous vehicles on public roads. Addresses
  • iso-pas-8800-2024 (4.5) — Addresses safety-related E/E systems using AI technology in series-production road vehicles, coverin
  • draft-ietf-aipref-vocab (4.4) — Defines a standardized vocabulary for expressing preferences about how digital assets should be used
  • iso-iec-ts-6254-2025 (4.4) — Provides approaches for achieving explainability and interpretability of ML and AI systems across li

Partially Addressing Ideas

13 extracted ideas touch on this gap:

Idea Draft Type
AI Network Security Agent draft-yuan-rtgwg-security-agent-usecase architecture
A2A Protocol Transport over MOQT draft-a2a-moqt-transport protocol
Distributed AI Accountability Protocol draft-aylward-daap-v2 protocol
Post-Discovery Authorization Handshake draft-barney-caam protocol
Evidence-based Autonomy Maturity Model draft-berlinai-vera mechanism
Intent-Based Just-in-Time Authorization draft-chen-agent-decoupled-authorization-model architecture
Dynamic Behavior-Based Authentication and Authorization Requirements draft-chen-ai-agent-auth-new-requirements requirement
Dynamic Task Coordination Requirements for AI Agents draft-cui-ai-agent-task requirement

...and 5 more


6. Multi-Agent Conflict Resolution

Severity HIGH
Category A2A protocols
Drafts in category 157

No protocol exists for resolving conflicts when multiple autonomous agents have competing objectives or try to access the same resources simultaneously. Current A2A protocols assume cooperative scenarios.

Evidence: Multi-agent systems in production environments frequently deadlock or exhibit emergent adversarial behavior

Keyword matches (drafts mentioning gap topic):

Top-rated in A2A protocols (157 drafts):

  • draft-guy-bary-stamp-protocol (4.6) — Defines STAMP protocol for cryptographic delegation and proof in AI agent systems. Provides task-bou
  • draft-williams-netmod-lm-hierarchy-topology (4.6) — Defines YANG data model for hierarchical language model coordination across tiny, small, and large L
  • draft-ietf-lake-edhoc (4.6) — Specifies EDHOC, a compact authenticated Diffie-Hellman key exchange protocol for constrained enviro
  • draft-chang-agent-token-efficient (4.5) — Defines ADOL (Agentic Data Optimization Layer) to address token bloat in agent communication protoco
  • iso-23725-2024 (4.4) — Defines interoperability interfaces between fleet management and autonomous haulage systems in surfa

Partially Addressing Ideas

No directly related technical ideas found in current drafts — this gap is entirely unaddressed.


7. Inter-Standards-Body Protocol Bridging

Severity HIGH
Category data formats/interop
Drafts in category 214

Protocols developed by different standards bodies (IETF, ITU-T, ISO) cannot interoperate, creating silos where agents using ITU-T frameworks cannot communicate with those following IETF protocols.

Evidence: Enterprise environments need single agents to work across telecom networks (ITU-T), internet protocols (IETF), and industrial systems (ISO)

Keyword matches (drafts mentioning gap topic):

Top-rated in data formats/interop (214 drafts):

  • draft-cowles-volt (4.8) — Defines tamper-evident execution trace format for AI agent workflows using hash chains and cryptogra
  • itu-t-y-3172 (4.7) — Establishes comprehensive architectural framework for machine learning deployment in future networks
  • iso-iec-22989-2022 (4.7) — ISO/IEC standard defining core AI concepts and establishing standardized terminology across the fiel
  • draft-williams-netmod-lm-hierarchy-topology (4.6) — Defines YANG data model for hierarchical language model coordination across tiny, small, and large L
  • draft-ietf-lake-app-profiles (4.6) — Defines canonical CBOR representation for EDHOC application profiles and coordination mechanisms for

Partially Addressing Ideas

No directly related technical ideas found in current drafts — this gap is entirely unaddressed.


8. Agent Behavioral Audit Trails

Severity HIGH
Category policy/governance
Drafts in category 214

Missing standards for maintaining immutable logs of agent decisions and actions that can support forensic analysis and regulatory compliance. Current logging focuses on system events not decision rationale.

Evidence: Financial and healthcare regulations require detailed audit trails, but AI systems cannot provide decision-level accountability

Keyword matches (drafts mentioning gap topic):

Top-rated in policy/governance (214 drafts):

  • draft-cowles-volt (4.8) — Defines tamper-evident execution trace format for AI agent workflows using hash chains and cryptogra
  • draft-aylward-daap-v2 (4.8) — Defines comprehensive protocol for AI agent accountability including authentication, monitoring, and
  • itu-t-y-3172 (4.7) — Establishes comprehensive architectural framework for machine learning deployment in future networks
  • iso-iec-22989-2022 (4.7) — ISO/IEC standard defining core AI concepts and establishing standardized terminology across the fiel
  • iso-iec-42001-2023 (4.6) — ISO/IEC standard establishing comprehensive AI management system requirements covering governance, r

Partially Addressing Ideas

9 extracted ideas touch on this gap:

Idea Draft Type
Compliance-oriented agent memory model draft-gaikwad-aps-profile pattern
Delegated Agent Authorization Protocol draft-mishra-oauth-agent-grants protocol
Distributed AI Accountability Protocol draft-aylward-daap-v2 protocol
Verifiable Agent Conversation Format draft-birkholz-verifiable-agent-conversations protocol
Intent-Based Just-in-Time Authorization draft-chen-agent-decoupled-authorization-model architecture
Dynamic Behavior-Based Authentication and Authorization Requirements draft-chen-ai-agent-auth-new-requirements requirement
Agent Persistent State Profile draft-gaikwad-aps-profile architecture
Agent Interaction & Delegation Protocol draft-vandoulas-aidp protocol

...and 1 more


9. Agent Resource Consumption Limits

Severity MEDIUM
Category autonomous netops
Drafts in category 124

Missing standards for how agents should self-regulate computational, network, and energy resource usage to prevent runaway consumption. Current traffic management focuses on traditional workloads, not autonomous agent behavior patterns.

Evidence: Early agent deployments show unpredictable resource usage spikes that can destabilize infrastructure

Keyword matches (drafts mentioning gap topic):

Top-rated in autonomous netops (124 drafts):

  • itu-t-y-3172 (4.7) — Establishes comprehensive architectural framework for machine learning deployment in future networks
  • iso-pas-8800-2024 (4.5) — Addresses safety-related E/E systems using AI technology in series-production road vehicles, coverin
  • draft-cui-nmrg-llm-benchmark (4.3) — Provides comprehensive evaluation framework for LLM-based network configuration agents. Includes emu
  • iso-22733-1-2021 (4.3) — Specifies test methodology for evaluating autonomous emergency braking system performance in car-to-
  • draft-wmz-nmrg-agent-ndt-arch (4.2) — Comprehensive architecture combining Network Digital Twin with Agentic AI for intent-based network o

Partially Addressing Ideas

12 extracted ideas touch on this gap:

Idea Draft Type
SCIM 2.0 Extension for Agents and Agentic Applications draft-abbey-scim-agent-extension extension
Context Distribution Optimization Framework draft-chang-agent-context-interaction mechanism
Events Query Protocol draft-gupta-httpapi-events-query protocol
Micro Agent Communication Protocol (µACP) draft-mallick-muacp protocol
MOQT Binding for A2A and MCP Protocols draft-nandakumar-ai-agent-moq-transport extension
AI Agent Protocol Requirements draft-rosenberg-ai-protocols requirement
SCIM 2.0 Agent Extension draft-scim-agent-extension extension
Authorized Connection Policy Framework draft-steckbeck-ua-conn-sec mechanism

...and 4 more


10. Agent Training Data Provenance Tracking

Severity MEDIUM
Category data formats/interop
Drafts in category 214

Missing standards for tracking the lineage and provenance of training data as it flows between agents and gets updated through federated learning or agent interactions.

Evidence: Data protection regulations require knowing data sources, but current AI systems cannot trace training data origins

Keyword matches (drafts mentioning gap topic):

Top-rated in data formats/interop (214 drafts):

  • draft-cowles-volt (4.8) — Defines tamper-evident execution trace format for AI agent workflows using hash chains and cryptogra
  • itu-t-y-3172 (4.7) — Establishes comprehensive architectural framework for machine learning deployment in future networks
  • iso-iec-22989-2022 (4.7) — ISO/IEC standard defining core AI concepts and establishing standardized terminology across the fiel
  • draft-williams-netmod-lm-hierarchy-topology (4.6) — Defines YANG data model for hierarchical language model coordination across tiny, small, and large L
  • draft-ietf-lake-app-profiles (4.6) — Defines canonical CBOR representation for EDHOC application profiles and coordination mechanisms for

Partially Addressing Ideas

30 extracted ideas touch on this gap:

Idea Draft Type
EAT Profile for AI Agent Attestation draft-messous-eat-ai extension
Warrant Certificate Authority (WCA) draft-bondar-wca architecture
Blockchain-Anchored Integrity for AI Provenance draft-reilly-sentinel-protocol mechanism
AI Traffic Characterization Framework draft-aft-ai-traffic requirement
AI Traffic Characterization Framework draft-ai-traffic requirement
Network Architecture for AI Training and Inference draft-akhavain-moussa-ai-network architecture
Verifiable Agent Conversation Format draft-birkholz-verifiable-agent-conversations protocol
Agentic Data Optimization Layer (ADOL) draft-chang-agent-token-efficient protocol

...and 22 more


11. Agent-Generated Content Attribution

Severity MEDIUM
Category data formats/interop
Drafts in category 214

Missing technical standards for embedding cryptographic attribution in content created by agents, enabling detection of AI-generated text, code, or decisions. Current synthetic content guidance lacks implementation details.

Evidence: Need to distinguish agent-generated content from human-generated for legal, security, and quality assurance purposes

Keyword matches (drafts mentioning gap topic):

Top-rated in data formats/interop (214 drafts):

  • draft-cowles-volt (4.8) — Defines tamper-evident execution trace format for AI agent workflows using hash chains and cryptogra
  • itu-t-y-3172 (4.7) — Establishes comprehensive architectural framework for machine learning deployment in future networks
  • iso-iec-22989-2022 (4.7) — ISO/IEC standard defining core AI concepts and establishing standardized terminology across the fiel
  • draft-williams-netmod-lm-hierarchy-topology (4.6) — Defines YANG data model for hierarchical language model coordination across tiny, small, and large L
  • draft-ietf-lake-app-profiles (4.6) — Defines canonical CBOR representation for EDHOC application profiles and coordination mechanisms for

Partially Addressing Ideas

No directly related technical ideas found in current drafts — this gap is entirely unaddressed.


Cross-Cutting Analysis

Gaps by Category

Category Drafts Gaps Gap Topics
a2a protocols 157 1 Multi-Agent Conflict Resolution
agent identity/auth 160 1 Cross-Domain Agent Identity Portability
ai safety/alignment 112 2 Agent Capability Degradation Detection; Emergency Agent Override Protocols
autonomous netops 124 1 Agent Resource Consumption Limits
data formats/interop 214 3 Inter-Standards-Body Protocol Bridging; Agent Training Data Provenance Tracking; Agent-Generated Content Attribution
human-agent interaction 57 1 Real-Time Agent Behavior Explanation
policy/governance 214 2 Agent Legal Liability Framework; Agent Behavioral Audit Trails

Recommendations

Based on the gap analysis, the highest-impact areas for new standardization work:

  1. Runtime behavior verification — The most critical safety gap. Agents declare policies but nothing validates compliance at runtime.
  2. Error recovery and rollback — Autonomous operations need standardized failure handling before real deployment at scale.
  3. Protocol interoperability layer — 92 competing A2A protocols need a translation/negotiation framework to avoid fragmentation.
  4. Dynamic trust systems — Static certificates cannot scale to long-running agent ecosystems. Trust must be earned and revocable.
  5. Human emergency override — The 7:1 ratio of autonomous capability to human oversight drafts is concerning for production deployments.