2734 lines
112 KiB
HTML
2734 lines
112 KiB
HTML
<!DOCTYPE html>
|
||
<html lang="en" class="Internet-Draft">
|
||
<head>
|
||
<meta charset="utf-8">
|
||
<meta content="Common,Latin" name="scripts">
|
||
<meta content="initial-scale=1.0" name="viewport">
|
||
<title>Standardized Human Override Protocol for Autonomous Agents</title>
|
||
<meta content="Christian Nennemann" name="author">
|
||
<meta content="
|
||
This document defines a cross-vendor interoperable protocol for
|
||
human operators to override autonomous agent decisions at multiple
|
||
authority levels, with verified compliance and audit trails. It
|
||
absorbs and supersedes the override mechanisms described in earlier
|
||
HEOP and HITL drafts, providing a single unified protocol that
|
||
works across agent implementations from different vendors. The
|
||
protocol specifies three override levels (Advisory, Mandatory,
|
||
Emergency), a JWT-based override signal format, multiple delivery
|
||
mechanisms, compliance verification, and graceful degradation
|
||
semantics. Override events are recorded as Execution Context Token
|
||
(ECT) nodes for tamper-evident audit.
|
||
" name="description">
|
||
<meta content="xml2rfc 3.31.0" name="generator">
|
||
<meta content="human override" name="keyword">
|
||
<meta content="autonomous agents" name="keyword">
|
||
<meta content="kill switch" name="keyword">
|
||
<meta content="override protocol" name="keyword">
|
||
<meta content="agent safety" name="keyword">
|
||
<meta content="draft-nennemann-agent-override-protocol-00" name="ietf.draft">
|
||
<!-- Generator version information:
|
||
xml2rfc 3.31.0
|
||
Python 3.14.3
|
||
ConfigArgParse 1.7.1
|
||
google-i18n-address 3.1.1
|
||
intervaltree 3.2.1
|
||
Jinja2 3.1.6
|
||
lxml 6.0.2
|
||
platformdirs 4.9.2
|
||
pycountry 26.2.16
|
||
PyYAML 6.0.3
|
||
requests 2.32.5
|
||
wcwidth 0.6.0
|
||
-->
|
||
<link href="draft-nennemann-agent-override-protocol-00.xml" rel="alternate" type="application/rfc+xml">
|
||
<link href="#copyright" rel="license">
|
||
<style type="text/css">/*
|
||
|
||
NOTE: Changes at the bottom of this file overrides some earlier settings.
|
||
|
||
Once the style has stabilized and has been adopted as an official RFC style,
|
||
this can be consolidated so that style settings occur only in one place, but
|
||
for now the contents of this file consists first of the initial CSS work as
|
||
provided to the RFC Formatter (xml2rfc) work, followed by itemized and
|
||
commented changes found necessary during the development of the v3
|
||
formatters.
|
||
|
||
*/
|
||
|
||
/* fonts */
|
||
@import url('https://static.ietf.org/fonts/noto-sans/import.css'); /* Sans-serif */
|
||
@import url('https://static.ietf.org/fonts/noto-serif/import.css'); /* Serif (print) */
|
||
@import url('https://static.ietf.org/fonts/roboto-mono/import.css'); /* Monospace */
|
||
|
||
:root {
|
||
--font-sans: 'Noto Sans', Arial, Helvetica, sans-serif;
|
||
--font-serif: 'Noto Serif', 'Times', 'Times New Roman', serif;
|
||
--font-mono: 'Roboto Mono', Courier, 'Courier New', monospace;
|
||
}
|
||
|
||
@viewport {
|
||
zoom: 1.0;
|
||
}
|
||
@-ms-viewport {
|
||
width: extend-to-zoom;
|
||
zoom: 1.0;
|
||
}
|
||
/* general and mobile first */
|
||
html {
|
||
}
|
||
body {
|
||
max-width: 90%;
|
||
margin: 1.5em auto;
|
||
color: #222;
|
||
background-color: #fff;
|
||
font-size: 14px;
|
||
font-family: var(--font-sans);
|
||
line-height: 1.6;
|
||
scroll-behavior: smooth;
|
||
overflow-wrap: break-word;
|
||
}
|
||
.ears {
|
||
display: none;
|
||
}
|
||
|
||
/* headings */
|
||
#title, h1, h2, h3, h4, h5, h6 {
|
||
margin: 1em 0 0.5em;
|
||
font-weight: bold;
|
||
line-height: 1.3;
|
||
}
|
||
#title {
|
||
clear: both;
|
||
border-bottom: 1px solid #ddd;
|
||
margin: 0 0 0.5em 0;
|
||
padding: 1em 0 0.5em;
|
||
}
|
||
.author {
|
||
padding-bottom: 4px;
|
||
}
|
||
h1 {
|
||
font-size: 26px;
|
||
margin: 1em 0;
|
||
}
|
||
h2 {
|
||
font-size: 22px;
|
||
margin-top: -20px; /* provide offset for in-page anchors */
|
||
padding-top: 33px;
|
||
}
|
||
h3 {
|
||
font-size: 18px;
|
||
margin-top: -36px; /* provide offset for in-page anchors */
|
||
padding-top: 42px;
|
||
}
|
||
h4 {
|
||
font-size: 16px;
|
||
margin-top: -36px; /* provide offset for in-page anchors */
|
||
padding-top: 42px;
|
||
}
|
||
h5, h6 {
|
||
font-size: 14px;
|
||
}
|
||
#n-copyright-notice {
|
||
border-bottom: 1px solid #ddd;
|
||
padding-bottom: 1em;
|
||
margin-bottom: 1em;
|
||
}
|
||
/* general structure */
|
||
p {
|
||
padding: 0;
|
||
margin: 0 0 1em 0;
|
||
text-align: left;
|
||
}
|
||
div, span {
|
||
position: relative;
|
||
}
|
||
div {
|
||
margin: 0;
|
||
}
|
||
.alignRight.art-text {
|
||
background-color: #f9f9f9;
|
||
border: 1px solid #eee;
|
||
border-radius: 3px;
|
||
padding: 1em 1em 0;
|
||
margin-bottom: 1.5em;
|
||
}
|
||
.alignRight.art-text pre {
|
||
padding: 0;
|
||
}
|
||
.alignRight {
|
||
margin: 1em 0;
|
||
}
|
||
.alignRight > *:first-child {
|
||
border: none;
|
||
margin: 0;
|
||
float: right;
|
||
clear: both;
|
||
}
|
||
.alignRight > *:nth-child(2) {
|
||
clear: both;
|
||
display: block;
|
||
border: none;
|
||
}
|
||
svg {
|
||
display: block;
|
||
}
|
||
@media print {
|
||
svg {
|
||
max-height: 850px;
|
||
max-width: 660px;
|
||
}
|
||
}
|
||
svg[font-family~="serif" i], svg [font-family~="serif" i] {
|
||
font-family: var(--font-serif);
|
||
}
|
||
svg[font-family~="sans-serif" i], svg [font-family~="sans-serif" i] {
|
||
font-family: var(--font-sans);
|
||
}
|
||
svg[font-family~="monospace" i], svg [font-family~="monospace" i] {
|
||
font-family: var(--font-mono);
|
||
}
|
||
.alignCenter.art-text {
|
||
background-color: #f9f9f9;
|
||
border: 1px solid #eee;
|
||
border-radius: 3px;
|
||
padding: 1em 1em 0;
|
||
margin-bottom: 1.5em;
|
||
}
|
||
.alignCenter.art-text pre {
|
||
padding: 0;
|
||
}
|
||
.alignCenter {
|
||
margin: 1em 0;
|
||
}
|
||
.alignCenter > *:first-child {
|
||
display: table;
|
||
border: none;
|
||
margin: 0 auto;
|
||
}
|
||
|
||
/* lists */
|
||
ol, ul {
|
||
padding: 0;
|
||
margin: 0 0 1em 2em;
|
||
}
|
||
ol ol, ul ul, ol ul, ul ol {
|
||
margin-left: 1em;
|
||
}
|
||
li {
|
||
margin: 0 0 0.25em 0;
|
||
}
|
||
.ulCompact li {
|
||
margin: 0;
|
||
}
|
||
ul.empty, .ulEmpty {
|
||
list-style-type: none;
|
||
}
|
||
ul.empty li, .ulEmpty li {
|
||
margin-top: 0.5em;
|
||
}
|
||
ul.ulBare, li.ulBare {
|
||
margin-left: 0em !important;
|
||
}
|
||
ul.compact, .ulCompact,
|
||
ol.compact, .olCompact {
|
||
line-height: 100%;
|
||
margin: 0 0 0 2em;
|
||
}
|
||
|
||
/* definition lists */
|
||
dl {
|
||
}
|
||
dl > dt {
|
||
float: left;
|
||
margin-right: 1em;
|
||
}
|
||
/*
|
||
dl.nohang > dt {
|
||
float: none;
|
||
}
|
||
*/
|
||
dl > dd {
|
||
margin-bottom: .8em;
|
||
min-height: 1.3em;
|
||
}
|
||
dl.compact > dd, .dlCompact > dd {
|
||
margin-bottom: 0em;
|
||
}
|
||
dl > dd > dl {
|
||
margin-top: 0.5em;
|
||
margin-bottom: 0em;
|
||
}
|
||
|
||
/* links */
|
||
a {
|
||
text-decoration: none;
|
||
}
|
||
a[href] {
|
||
color: #22e; /* Arlen: WCAG 2019 */
|
||
}
|
||
a[href]:hover {
|
||
background-color: #f2f2f2;
|
||
}
|
||
figcaption a[href],
|
||
a[href].selfRef {
|
||
color: #222;
|
||
}
|
||
/* XXX probably not this:
|
||
a.selfRef:hover {
|
||
background-color: transparent;
|
||
cursor: default;
|
||
} */
|
||
|
||
/* Figures */
|
||
tt, code, pre {
|
||
background-color: #f9f9f9;
|
||
font-family: var(--font-mono);
|
||
}
|
||
pre {
|
||
border: 1px solid #eee;
|
||
margin: 0;
|
||
padding: 1em;
|
||
}
|
||
img {
|
||
max-width: 100%;
|
||
}
|
||
figure {
|
||
margin: 0;
|
||
}
|
||
figure blockquote {
|
||
margin: 0.8em 0.4em 0.4em;
|
||
}
|
||
figcaption {
|
||
font-style: italic;
|
||
margin: 0 0 1em 0;
|
||
}
|
||
@media screen {
|
||
pre {
|
||
overflow-x: auto;
|
||
max-width: 100%;
|
||
max-width: calc(100% - 22px);
|
||
}
|
||
}
|
||
|
||
/* aside, blockquote */
|
||
aside, blockquote {
|
||
margin-left: 0;
|
||
padding: 1.2em 2em;
|
||
}
|
||
blockquote {
|
||
background-color: #f9f9f9;
|
||
color: #111; /* Arlen: WCAG 2019 */
|
||
border: 1px solid #ddd;
|
||
border-radius: 3px;
|
||
margin: 1em 0;
|
||
}
|
||
blockquote > *:last-child {
|
||
margin-bottom: 0;
|
||
}
|
||
cite {
|
||
display: block;
|
||
text-align: right;
|
||
font-style: italic;
|
||
}
|
||
.xref {
|
||
overflow-wrap: normal;
|
||
}
|
||
|
||
/* tables */
|
||
table {
|
||
width: 100%;
|
||
margin: 0 0 1em;
|
||
border-collapse: collapse;
|
||
border: 1px solid #eee;
|
||
}
|
||
th, td {
|
||
text-align: left;
|
||
vertical-align: top;
|
||
padding: 0.5em 0.75em;
|
||
}
|
||
th {
|
||
text-align: left;
|
||
background-color: #e9e9e9;
|
||
}
|
||
tr:nth-child(2n+1) > td {
|
||
background-color: #f5f5f5;
|
||
}
|
||
table caption {
|
||
font-style: italic;
|
||
margin: 0;
|
||
padding: 0;
|
||
text-align: left;
|
||
}
|
||
table p {
|
||
/* XXX to avoid bottom margin on table row signifiers. If paragraphs should
|
||
be allowed within tables more generally, it would be far better to select on a class. */
|
||
margin: 0;
|
||
}
|
||
|
||
/* pilcrow */
|
||
a.pilcrow {
|
||
color: #666; /* Arlen: AHDJ 2019 */
|
||
text-decoration: none;
|
||
visibility: hidden;
|
||
user-select: none;
|
||
-ms-user-select: none;
|
||
-o-user-select:none;
|
||
-moz-user-select: none;
|
||
-khtml-user-select: none;
|
||
-webkit-user-select: none;
|
||
-webkit-touch-callout: none;
|
||
}
|
||
@media screen {
|
||
aside:hover > a.pilcrow,
|
||
p:hover > a.pilcrow,
|
||
blockquote:hover > a.pilcrow,
|
||
div:hover > a.pilcrow,
|
||
li:hover > a.pilcrow,
|
||
pre:hover > a.pilcrow {
|
||
visibility: visible;
|
||
}
|
||
a.pilcrow:hover {
|
||
background-color: transparent;
|
||
}
|
||
}
|
||
|
||
/* misc */
|
||
hr {
|
||
border: 0;
|
||
border-top: 1px solid #eee;
|
||
}
|
||
.bcp14 {
|
||
font-variant: small-caps;
|
||
}
|
||
|
||
.role {
|
||
font-variant: all-small-caps;
|
||
}
|
||
|
||
/* info block */
|
||
#identifiers {
|
||
margin: 0;
|
||
font-size: 0.9em;
|
||
}
|
||
#identifiers dt {
|
||
width: 3em;
|
||
clear: left;
|
||
}
|
||
#identifiers dd {
|
||
float: left;
|
||
margin-bottom: 0;
|
||
}
|
||
/* Fix PDF info block run off issue */
|
||
@media print {
|
||
#identifiers dd {
|
||
max-width: 100%;
|
||
}
|
||
}
|
||
#identifiers .authors .author {
|
||
display: inline-block;
|
||
margin-right: 1.5em;
|
||
}
|
||
#identifiers .authors .org {
|
||
font-style: italic;
|
||
}
|
||
|
||
/* The prepared/rendered info at the very bottom of the page */
|
||
.docInfo {
|
||
color: #666; /* Arlen: WCAG 2019 */
|
||
font-size: 0.9em;
|
||
font-style: italic;
|
||
margin-top: 2em;
|
||
}
|
||
.docInfo .prepared {
|
||
float: left;
|
||
}
|
||
.docInfo .prepared {
|
||
float: right;
|
||
}
|
||
|
||
/* table of contents */
|
||
#toc {
|
||
padding: 0.75em 0 2em 0;
|
||
margin-bottom: 1em;
|
||
}
|
||
nav.toc ul {
|
||
margin: 0 0.5em 0 0;
|
||
padding: 0;
|
||
list-style: none;
|
||
}
|
||
nav.toc li {
|
||
line-height: 1.3em;
|
||
margin: 0.75em 0;
|
||
padding-left: 1.2em;
|
||
text-indent: -1.2em;
|
||
}
|
||
/* references */
|
||
.references dt {
|
||
text-align: right;
|
||
font-weight: bold;
|
||
min-width: 7em;
|
||
}
|
||
.references dd {
|
||
margin-left: 8em;
|
||
overflow: auto;
|
||
}
|
||
|
||
.refInstance {
|
||
margin-bottom: 1.25em;
|
||
}
|
||
|
||
.refSubseries {
|
||
margin-bottom: 1.25em;
|
||
}
|
||
|
||
.references .ascii {
|
||
margin-bottom: 0.25em;
|
||
}
|
||
|
||
/* index */
|
||
.index ul {
|
||
margin: 0 0 0 1em;
|
||
padding: 0;
|
||
list-style: none;
|
||
}
|
||
.index ul ul {
|
||
margin: 0;
|
||
}
|
||
.index li {
|
||
margin: 0;
|
||
text-indent: -2em;
|
||
padding-left: 2em;
|
||
padding-bottom: 5px;
|
||
}
|
||
.indexIndex {
|
||
margin: 0.5em 0 1em;
|
||
}
|
||
.index a {
|
||
font-weight: 700;
|
||
}
|
||
/* make the index two-column on all but the smallest screens */
|
||
@media (min-width: 600px) {
|
||
.index ul {
|
||
-moz-column-count: 2;
|
||
-moz-column-gap: 20px;
|
||
}
|
||
.index ul ul {
|
||
-moz-column-count: 1;
|
||
-moz-column-gap: 0;
|
||
}
|
||
}
|
||
|
||
/* authors */
|
||
address.vcard {
|
||
font-style: normal;
|
||
margin: 1em 0;
|
||
}
|
||
|
||
address.vcard .nameRole {
|
||
font-weight: 700;
|
||
margin-left: 0;
|
||
}
|
||
address.vcard .label {
|
||
font-family: var(--font-sans);
|
||
margin: 0.5em 0;
|
||
}
|
||
address.vcard .type {
|
||
display: none;
|
||
}
|
||
.alternative-contact {
|
||
margin: 1.5em 0 1em;
|
||
}
|
||
hr.addr {
|
||
border-top: 1px dashed;
|
||
margin: 0;
|
||
color: #ddd;
|
||
max-width: calc(100% - 16px);
|
||
}
|
||
|
||
/* temporary notes */
|
||
.rfcEditorRemove::before {
|
||
position: absolute;
|
||
top: 0.2em;
|
||
right: 0.2em;
|
||
padding: 0.2em;
|
||
content: "The RFC Editor will remove this note";
|
||
color: #9e2a00; /* Arlen: WCAG 2019 */
|
||
background-color: #ffd; /* Arlen: WCAG 2019 */
|
||
}
|
||
.rfcEditorRemove {
|
||
position: relative;
|
||
padding-top: 1.8em;
|
||
background-color: #ffd; /* Arlen: WCAG 2019 */
|
||
border-radius: 3px;
|
||
}
|
||
.cref {
|
||
background-color: #ffd; /* Arlen: WCAG 2019 */
|
||
padding: 2px 4px;
|
||
}
|
||
.crefSource {
|
||
font-style: italic;
|
||
}
|
||
/* alternative layout for smaller screens */
|
||
@media screen and (max-width: 1023px) {
|
||
body {
|
||
padding-top: 2em;
|
||
}
|
||
#title {
|
||
padding: 1em 0;
|
||
}
|
||
h1 {
|
||
font-size: 24px;
|
||
}
|
||
h2 {
|
||
font-size: 20px;
|
||
margin-top: -18px; /* provide offset for in-page anchors */
|
||
padding-top: 38px;
|
||
}
|
||
#identifiers dd {
|
||
max-width: 60%;
|
||
}
|
||
#toc {
|
||
position: fixed;
|
||
z-index: 2;
|
||
top: 0;
|
||
right: 0;
|
||
padding: 0;
|
||
margin: 0;
|
||
background-color: inherit;
|
||
border-bottom: 1px solid #ccc;
|
||
}
|
||
#toc h2 {
|
||
margin: -1px 0 0 0;
|
||
padding: 4px 0 4px 6px;
|
||
padding-right: 1em;
|
||
min-width: 190px;
|
||
font-size: 1.1em;
|
||
text-align: right;
|
||
background-color: #444;
|
||
color: white;
|
||
cursor: pointer;
|
||
}
|
||
#toc h2::before { /* css hamburger */
|
||
float: right;
|
||
position: relative;
|
||
width: 1em;
|
||
height: 1px;
|
||
left: -164px;
|
||
margin: 6px 0 0 0;
|
||
background: white none repeat scroll 0 0;
|
||
box-shadow: 0 4px 0 0 white, 0 8px 0 0 white;
|
||
content: "";
|
||
}
|
||
#toc nav {
|
||
display: none;
|
||
padding: 0.5em 1em 1em;
|
||
overflow: auto;
|
||
height: calc(100vh - 48px);
|
||
border-left: 1px solid #ddd;
|
||
}
|
||
}
|
||
|
||
/* alternative layout for wide screens */
|
||
@media screen and (min-width: 1024px) {
|
||
body {
|
||
max-width: 724px;
|
||
margin: 42px auto;
|
||
padding-left: 1.5em;
|
||
padding-right: 29em;
|
||
}
|
||
#toc {
|
||
position: fixed;
|
||
top: 42px;
|
||
right: 42px;
|
||
width: 25%;
|
||
margin: 0;
|
||
padding: 0 1em;
|
||
z-index: 1;
|
||
}
|
||
#toc h2 {
|
||
border-top: none;
|
||
border-bottom: 1px solid #ddd;
|
||
font-size: 1em;
|
||
font-weight: normal;
|
||
margin: 0;
|
||
padding: 0.25em 1em 1em 0;
|
||
}
|
||
#toc nav {
|
||
display: block;
|
||
height: calc(90vh - 84px);
|
||
bottom: 0;
|
||
padding: 0.5em 0 0;
|
||
overflow: auto;
|
||
}
|
||
img { /* future proofing */
|
||
max-width: 100%;
|
||
height: auto;
|
||
}
|
||
}
|
||
|
||
/* pagination */
|
||
@media print {
|
||
body {
|
||
width: 100%;
|
||
}
|
||
p {
|
||
orphans: 3;
|
||
widows: 3;
|
||
}
|
||
#n-copyright-notice {
|
||
border-bottom: none;
|
||
}
|
||
#toc, #n-introduction {
|
||
page-break-before: always;
|
||
}
|
||
#toc {
|
||
border-top: none;
|
||
padding-top: 0;
|
||
}
|
||
figure, pre {
|
||
page-break-inside: avoid;
|
||
}
|
||
figure {
|
||
overflow: scroll;
|
||
}
|
||
.breakable pre {
|
||
break-inside: auto;
|
||
}
|
||
h1, h2, h3, h4, h5, h6 {
|
||
page-break-after: avoid;
|
||
}
|
||
h2+*, h3+*, h4+*, h5+*, h6+* {
|
||
page-break-before: avoid;
|
||
}
|
||
pre {
|
||
white-space: pre-wrap;
|
||
word-wrap: break-word;
|
||
font-size: 10pt;
|
||
}
|
||
table {
|
||
border: 1px solid #ddd;
|
||
}
|
||
td {
|
||
border-top: 1px solid #ddd;
|
||
}
|
||
}
|
||
|
||
/* This is commented out here, as the string-set: doesn't
|
||
pass W3C validation currently */
|
||
/*
|
||
.ears thead .left {
|
||
string-set: ears-top-left content();
|
||
}
|
||
|
||
.ears thead .center {
|
||
string-set: ears-top-center content();
|
||
}
|
||
|
||
.ears thead .right {
|
||
string-set: ears-top-right content();
|
||
}
|
||
|
||
.ears tfoot .left {
|
||
string-set: ears-bottom-left content();
|
||
}
|
||
|
||
.ears tfoot .center {
|
||
string-set: ears-bottom-center content();
|
||
}
|
||
|
||
.ears tfoot .right {
|
||
string-set: ears-bottom-right content();
|
||
}
|
||
*/
|
||
|
||
@page :first {
|
||
padding-top: 0;
|
||
@top-left {
|
||
content: normal;
|
||
border: none;
|
||
}
|
||
@top-center {
|
||
content: normal;
|
||
border: none;
|
||
}
|
||
@top-right {
|
||
content: normal;
|
||
border: none;
|
||
}
|
||
}
|
||
|
||
@page {
|
||
size: A4;
|
||
margin-bottom: 45mm;
|
||
padding-top: 20px;
|
||
/* The following is commented out here, but set appropriately by in code, as
|
||
the content depends on the document */
|
||
/*
|
||
@top-left {
|
||
content: 'Internet-Draft';
|
||
vertical-align: bottom;
|
||
border-bottom: solid 1px #ccc;
|
||
}
|
||
@top-left {
|
||
content: string(ears-top-left);
|
||
vertical-align: bottom;
|
||
border-bottom: solid 1px #ccc;
|
||
}
|
||
@top-center {
|
||
content: string(ears-top-center);
|
||
vertical-align: bottom;
|
||
border-bottom: solid 1px #ccc;
|
||
}
|
||
@top-right {
|
||
content: string(ears-top-right);
|
||
vertical-align: bottom;
|
||
border-bottom: solid 1px #ccc;
|
||
}
|
||
@bottom-left {
|
||
content: string(ears-bottom-left);
|
||
vertical-align: top;
|
||
border-top: solid 1px #ccc;
|
||
}
|
||
@bottom-center {
|
||
content: string(ears-bottom-center);
|
||
vertical-align: top;
|
||
border-top: solid 1px #ccc;
|
||
}
|
||
@bottom-right {
|
||
content: '[Page ' counter(page) ']';
|
||
vertical-align: top;
|
||
border-top: solid 1px #ccc;
|
||
}
|
||
*/
|
||
|
||
}
|
||
|
||
/* Changes introduced to fix issues found during implementation */
|
||
/* Make sure links are clickable even if overlapped by following H* */
|
||
a {
|
||
z-index: 2;
|
||
}
|
||
/* Separate body from document info even without intervening H1 */
|
||
section {
|
||
clear: both;
|
||
}
|
||
|
||
|
||
/* Top align author divs, to avoid names without organization dropping level with org names */
|
||
.author {
|
||
vertical-align: top;
|
||
}
|
||
|
||
/* Leave room in document info to show Internet-Draft on one line */
|
||
#identifiers dt {
|
||
width: 8em;
|
||
}
|
||
|
||
/* Don't waste quite as much whitespace between label and value in doc info */
|
||
#identifiers dd {
|
||
margin-left: 1em;
|
||
}
|
||
|
||
/* Give floating toc a background color (needed when it's a div inside section */
|
||
#toc {
|
||
background-color: white;
|
||
}
|
||
|
||
/* Make the collapsed ToC header render white on gray also when it's a link */
|
||
@media screen and (max-width: 1023px) {
|
||
#toc h2 a,
|
||
#toc h2 a:link,
|
||
#toc h2 a:focus,
|
||
#toc h2 a:hover,
|
||
#toc a.toplink,
|
||
#toc a.toplink:hover {
|
||
color: white;
|
||
background-color: #444;
|
||
text-decoration: none;
|
||
}
|
||
}
|
||
|
||
/* Give the bottom of the ToC some whitespace */
|
||
@media screen and (min-width: 1024px) {
|
||
#toc {
|
||
padding: 0 0 1em 1em;
|
||
}
|
||
}
|
||
|
||
/* Style section numbers with more space between number and title */
|
||
.section-number {
|
||
padding-right: 0.5em;
|
||
}
|
||
|
||
/* prevent monospace from becoming overly large */
|
||
tt, code, pre {
|
||
font-size: 95%;
|
||
}
|
||
|
||
/* Fix the height/width aspect for ascii art*/
|
||
.sourcecode pre,
|
||
.art-text pre {
|
||
line-height: 1.12;
|
||
}
|
||
|
||
|
||
/* Add styling for a link in the ToC that points to the top of the document */
|
||
a.toplink {
|
||
float: right;
|
||
margin-right: 0.5em;
|
||
}
|
||
|
||
/* Fix the dl styling to match the RFC 7992 attributes */
|
||
dl > dt,
|
||
dl.dlParallel > dt {
|
||
float: left;
|
||
margin-right: 1em;
|
||
}
|
||
dl.dlNewline > dt {
|
||
float: none;
|
||
}
|
||
|
||
/* Provide styling for table cell text alignment */
|
||
table td.text-left,
|
||
table th.text-left {
|
||
text-align: left;
|
||
}
|
||
table td.text-center,
|
||
table th.text-center {
|
||
text-align: center;
|
||
}
|
||
table td.text-right,
|
||
table th.text-right {
|
||
text-align: right;
|
||
}
|
||
|
||
/* Make the alternative author contact information look less like just another
|
||
author, and group it closer with the primary author contact information */
|
||
.alternative-contact {
|
||
margin: 0.5em 0 0.25em 0;
|
||
}
|
||
address .non-ascii {
|
||
margin: 0 0 0 2em;
|
||
}
|
||
|
||
/* With it being possible to set tables with alignment
|
||
left, center, and right, { width: 100%; } does not make sense */
|
||
table {
|
||
width: auto;
|
||
}
|
||
|
||
/* Avoid reference text that sits in a block with very wide left margin,
|
||
because of a long floating dt label.*/
|
||
.references dd {
|
||
overflow: visible;
|
||
}
|
||
|
||
/* Control caption placement */
|
||
caption {
|
||
caption-side: bottom;
|
||
}
|
||
|
||
/* Limit the width of the author address vcard, so names in right-to-left
|
||
script don't end up on the other side of the page. */
|
||
|
||
address.vcard {
|
||
max-width: 30em;
|
||
margin-right: auto;
|
||
}
|
||
|
||
/* For address alignment dependent on LTR or RTL scripts */
|
||
address div.left {
|
||
text-align: left;
|
||
}
|
||
address div.right {
|
||
text-align: right;
|
||
}
|
||
|
||
/* Provide table alignment support. We can't use the alignX classes above
|
||
since they do unwanted things with caption and other styling. */
|
||
table.right {
|
||
margin-left: auto;
|
||
margin-right: 0;
|
||
}
|
||
table.center {
|
||
margin-left: auto;
|
||
margin-right: auto;
|
||
}
|
||
table.left {
|
||
margin-left: 0;
|
||
margin-right: auto;
|
||
}
|
||
|
||
/* Give the table caption label the same styling as the figcaption */
|
||
caption a[href] {
|
||
color: #222;
|
||
}
|
||
|
||
@media print {
|
||
.toplink {
|
||
display: none;
|
||
}
|
||
|
||
/* avoid overwriting the top border line with the ToC header */
|
||
#toc {
|
||
padding-top: 1px;
|
||
}
|
||
|
||
/* Avoid page breaks inside dl and author address entries */
|
||
.vcard {
|
||
page-break-inside: avoid;
|
||
}
|
||
|
||
}
|
||
/* Tweak the bcp14 keyword presentation */
|
||
.bcp14 {
|
||
font-variant: small-caps;
|
||
font-weight: bold;
|
||
font-size: 0.9em;
|
||
}
|
||
/* Tweak the invisible space above H* in order not to overlay links in text above */
|
||
h2 {
|
||
margin-top: -18px; /* provide offset for in-page anchors */
|
||
padding-top: 31px;
|
||
}
|
||
h3 {
|
||
margin-top: -18px; /* provide offset for in-page anchors */
|
||
padding-top: 24px;
|
||
}
|
||
h4 {
|
||
margin-top: -18px; /* provide offset for in-page anchors */
|
||
padding-top: 24px;
|
||
}
|
||
/* Float artwork pilcrow to the right */
|
||
@media screen {
|
||
.artwork a.pilcrow {
|
||
display: block;
|
||
line-height: 0.7;
|
||
margin-top: 0.15em;
|
||
}
|
||
}
|
||
/* Make pilcrows on dd visible */
|
||
@media screen {
|
||
dd:hover > a.pilcrow {
|
||
visibility: visible;
|
||
}
|
||
}
|
||
/* Make the placement of figcaption match that of a table's caption
|
||
by removing the figure's added bottom margin */
|
||
.alignLeft.art-text,
|
||
.alignCenter.art-text,
|
||
.alignRight.art-text {
|
||
margin-bottom: 0;
|
||
}
|
||
.alignLeft,
|
||
.alignCenter,
|
||
.alignRight {
|
||
margin: 1em 0 0 0;
|
||
}
|
||
/* In print, the pilcrow won't show on hover, so prevent it from taking up space,
|
||
possibly even requiring a new line */
|
||
@media print {
|
||
a.pilcrow {
|
||
display: none;
|
||
}
|
||
}
|
||
/* Styling for the external metadata */
|
||
div#external-metadata {
|
||
background-color: #eee;
|
||
padding: 0.5em;
|
||
margin-bottom: 0.5em;
|
||
display: none;
|
||
}
|
||
div#internal-metadata {
|
||
padding: 0.5em; /* to match the external-metadata padding */
|
||
}
|
||
/* Styling for title RFC Number */
|
||
h1#rfcnum {
|
||
clear: both;
|
||
margin: 0 0 -1em;
|
||
padding: 1em 0 0 0;
|
||
}
|
||
/* Make .olPercent look the same as <ol><li> */
|
||
dl.olPercent > dd {
|
||
margin-bottom: 0.25em;
|
||
min-height: initial;
|
||
}
|
||
/* Give aside some styling to set it apart */
|
||
aside {
|
||
border-left: 1px solid #ddd;
|
||
margin: 1em 0 1em 2em;
|
||
padding: 0.2em 2em;
|
||
}
|
||
aside > dl,
|
||
aside > ol,
|
||
aside > ul,
|
||
aside > table,
|
||
aside > p {
|
||
margin-bottom: 0.5em;
|
||
}
|
||
/* Additional page break settings */
|
||
@media print {
|
||
figcaption, table caption {
|
||
page-break-before: avoid;
|
||
}
|
||
}
|
||
/* Font size adjustments for print */
|
||
@media print {
|
||
body { font-size: 10pt; line-height: normal; max-width: 96%; }
|
||
h1 { font-size: 1.72em; padding-top: 1.5em; } /* 1*1.2*1.2*1.2 */
|
||
h2 { font-size: 1.44em; padding-top: 1.5em; } /* 1*1.2*1.2 */
|
||
h3 { font-size: 1.2em; padding-top: 1.5em; } /* 1*1.2 */
|
||
h4 { font-size: 1em; padding-top: 1.5em; }
|
||
h5, h6 { font-size: 1em; margin: initial; padding: 0.5em 0 0.3em; }
|
||
}
|
||
/* Sourcecode margin in print, when there's no pilcrow */
|
||
@media print {
|
||
.artwork,
|
||
.artwork > pre,
|
||
.sourcecode {
|
||
margin-bottom: 1em;
|
||
}
|
||
}
|
||
/* Avoid narrow tables forcing too narrow table captions, which may render badly */
|
||
table {
|
||
min-width: 20em;
|
||
}
|
||
/* ol type a */
|
||
ol.type-a { list-style-type: lower-alpha; }
|
||
ol.type-A { list-style-type: upper-alpha; }
|
||
ol.type-i { list-style-type: lower-roman; }
|
||
ol.type-I { list-style-type: upper-roman; }
|
||
/* Apply the print table and row borders in general, on request from the RPC,
|
||
and increase the contrast between border and odd row background slightly */
|
||
table {
|
||
border: 1px solid #ddd;
|
||
}
|
||
td {
|
||
border-top: 1px solid #ddd;
|
||
}
|
||
tr {
|
||
break-inside: avoid;
|
||
}
|
||
tr:nth-child(2n+1) > td {
|
||
background-color: #f8f8f8;
|
||
}
|
||
/* Use style rules to govern display of the TOC. */
|
||
@media screen and (max-width: 1023px) {
|
||
#toc nav { display: none; }
|
||
#toc.active nav { display: block; }
|
||
}
|
||
/* Add support for keepWithNext */
|
||
.keepWithNext {
|
||
break-after: avoid-page;
|
||
break-after: avoid-page;
|
||
}
|
||
/* Add support for keepWithPrevious */
|
||
.keepWithPrevious {
|
||
break-before: avoid-page;
|
||
}
|
||
/* Change the approach to avoiding breaks inside artwork etc. */
|
||
figure, pre, table, .artwork, .sourcecode {
|
||
break-before: auto;
|
||
break-after: auto;
|
||
}
|
||
/* Avoid breaks between <dt> and <dd> */
|
||
dl {
|
||
break-before: auto;
|
||
break-inside: auto;
|
||
}
|
||
dt {
|
||
break-before: auto;
|
||
break-after: avoid-page;
|
||
}
|
||
dd {
|
||
break-before: avoid-page;
|
||
break-after: auto;
|
||
orphans: 3;
|
||
widows: 3
|
||
}
|
||
span.break, dd.break {
|
||
margin-bottom: 0;
|
||
min-height: 0;
|
||
break-before: auto;
|
||
break-inside: auto;
|
||
break-after: auto;
|
||
}
|
||
/* Undo break-before ToC */
|
||
@media print {
|
||
#toc {
|
||
break-before: auto;
|
||
}
|
||
}
|
||
/* Text in compact lists should not get extra bottom margin space,
|
||
since that would makes the list not compact */
|
||
ul.compact p, .ulCompact p,
|
||
ol.compact p, .olCompact p {
|
||
margin: 0;
|
||
}
|
||
/* But the list as a whole needs the extra space at the end */
|
||
section ul.compact,
|
||
section .ulCompact,
|
||
section ol.compact,
|
||
section .olCompact {
|
||
margin-bottom: 1em; /* same as p not within ul.compact etc. */
|
||
}
|
||
/* The tt and code background above interferes with for instance table cell
|
||
backgrounds. Changed to something a bit more selective. */
|
||
tt, code {
|
||
background-color: transparent;
|
||
}
|
||
p tt, p code, li tt, li code, dt tt, dt code {
|
||
background-color: #f8f8f8;
|
||
}
|
||
/* Tweak the pre margin -- 0px doesn't come out well */
|
||
pre {
|
||
margin-top: 0.5px;
|
||
}
|
||
/* Tweak the compact list text */
|
||
ul.compact, .ulCompact,
|
||
ol.compact, .olCompact,
|
||
dl.compact, .dlCompact {
|
||
line-height: normal;
|
||
}
|
||
/* Don't add top margin for nested lists */
|
||
li > ul, li > ol, li > dl,
|
||
dd > ul, dd > ol, dd > dl,
|
||
dl > dd > dl {
|
||
margin-top: initial;
|
||
}
|
||
/* Elements that should not be rendered on the same line as a <dt> */
|
||
/* This should match the element list in writer.text.TextWriter.render_dl() */
|
||
dd > div.artwork:first-child,
|
||
dd > aside:first-child,
|
||
dd > blockquote:first-child,
|
||
dd > figure:first-child,
|
||
dd > ol:first-child,
|
||
dd > div.sourcecode:first-child,
|
||
dd > table:first-child,
|
||
dd > ul:first-child {
|
||
clear: left;
|
||
}
|
||
/* fix for weird browser behaviour when <dd/> is empty */
|
||
dt+dd:empty::before{
|
||
content: "\00a0";
|
||
}
|
||
/* Make paragraph spacing inside <li> smaller than in body text, to fit better within the list */
|
||
li > p {
|
||
margin-bottom: 0.5em
|
||
}
|
||
/* Don't let p margin spill out from inside list items */
|
||
li > p:last-of-type:only-child {
|
||
margin-bottom: 0;
|
||
}
|
||
</style>
|
||
<link href="rfc-local.css" rel="stylesheet" type="text/css">
|
||
<script type="application/javascript">async function addMetadata(){try{const e=document.styleSheets[0].cssRules;for(let t=0;t<e.length;t++)if(/#identifiers/.exec(e[t].selectorText)){const a=e[t].cssText.replace("#identifiers","#external-updates");document.styleSheets[0].insertRule(a,document.styleSheets[0].cssRules.length)}}catch(e){console.log(e)}const e=document.getElementById("external-metadata");if(e)try{var t,a="",o=function(e){const t=document.getElementsByTagName("meta");for(let a=0;a<t.length;a++)if(t[a].getAttribute("name")===e)return t[a].getAttribute("content");return""}("rfc.number");if(o){t="https://www.rfc-editor.org/rfc/rfc"+o+".json";try{const e=await fetch(t);a=await e.json()}catch(e){t=document.URL.indexOf("html")>=0?document.URL.replace(/html$/,"json"):document.URL+".json";const o=await fetch(t);a=await o.json()}}if(!a)return;e.style.display="block";const s="",d="https://datatracker.ietf.org/doc",n="https://datatracker.ietf.org/ipr/search",c="https://www.rfc-editor.org/info",l=a.doc_id.toLowerCase(),i=a.doc_id.slice(0,3).toLowerCase(),f=a.doc_id.slice(3).replace(/^0+/,""),u={status:"Status",obsoletes:"Obsoletes",obsoleted_by:"Obsoleted By",updates:"Updates",updated_by:"Updated By",see_also:"See Also",errata_url:"Errata"};let h="<dl style='overflow:hidden' id='external-updates'>";["status","obsoletes","obsoleted_by","updates","updated_by","see_also","errata_url"].forEach(e=>{if("status"==e){a[e]=a[e].toLowerCase();var t=a[e].split(" "),o=t.length,w="",p=1;for(let e=0;e<o;e++)p<o?w=w+r(t[e])+" ":w+=r(t[e]),p++;a[e]=w}else if("obsoletes"==e||"obsoleted_by"==e||"updates"==e||"updated_by"==e){var g,m="",b=1;g=a[e].length;for(let t=0;t<g;t++)a[e][t]&&(a[e][t]=String(a[e][t]).toLowerCase(),m=b<g?m+"<a href='"+s+"/rfc/".concat(a[e][t])+"'>"+a[e][t].slice(3)+"</a>, ":m+"<a href='"+s+"/rfc/".concat(a[e][t])+"'>"+a[e][t].slice(3)+"</a>",b++);a[e]=m}else if("see_also"==e){var y,L="",C=1;y=a[e].length;for(let t=0;t<y;t++)if(a[e][t]){a[e][t]=String(a[e][t]);var _=a[e][t].slice(0,3),v=a[e][t].slice(3).replace(/^0+/,"");L=C<y?"RFC"!=_?L+"<a href='"+s+"/info/"+_.toLowerCase().concat(v.toLowerCase())+"'>"+_+" "+v+"</a>, ":L+"<a href='"+s+"/info/"+_.toLowerCase().concat(v.toLowerCase())+"'>"+v+"</a>, ":"RFC"!=_?L+"<a href='"+s+"/info/"+_.toLowerCase().concat(v.toLowerCase())+"'>"+_+" "+v+"</a>":L+"<a href='"+s+"/info/"+_.toLowerCase().concat(v.toLowerCase())+"'>"+v+"</a>",C++}a[e]=L}else if("errata_url"==e){var R="";R=a[e]?R+"<a href='"+a[e]+"'>Errata exist</a> | <a href='"+d+"/"+l+"'>Datatracker</a>| <a href='"+n+"/?"+i+"="+f+"&submit="+i+"'>IPR</a> | <a href='"+c+"/"+l+"'>Info page</a>":"<a href='"+d+"/"+l+"'>Datatracker</a> | <a href='"+n+"/?"+i+"="+f+"&submit="+i+"'>IPR</a> | <a href='"+c+"/"+l+"'>Info page</a>",a[e]=R}""!=a[e]?"Errata"==u[e]?h+=`<dt>More info:</dt><dd>${a[e]}</dd>`:h+=`<dt>${u[e]}:</dt><dd>${a[e]}</dd>`:"Errata"==u[e]&&(h+=`<dt>More info:</dt><dd>${a[e]}</dd>`)}),h+="</dl>",e.innerHTML=h}catch(e){console.log(e)}else console.log("Could not locate metadata <div> element");function r(e){return e.charAt(0).toUpperCase()+e.slice(1)}}window.removeEventListener("load",addMetadata),window.addEventListener("load",addMetadata);</script>
|
||
</head>
|
||
<body class="xml2rfc">
|
||
<table class="ears">
|
||
<thead><tr>
|
||
<td class="left">Internet-Draft</td>
|
||
<td class="center">Agent Override Protocol</td>
|
||
<td class="right">March 2026</td>
|
||
</tr></thead>
|
||
<tfoot><tr>
|
||
<td class="left">Nennemann</td>
|
||
<td class="center">Expires 7 September 2026</td>
|
||
<td class="right">[Page]</td>
|
||
</tr></tfoot>
|
||
</table>
|
||
<div id="external-metadata" class="document-information"></div>
|
||
<div id="internal-metadata" class="document-information">
|
||
<dl id="identifiers">
|
||
<dt class="label-workgroup">Workgroup:</dt>
|
||
<dd class="workgroup">NMOP</dd>
|
||
<dt class="label-internet-draft">Internet-Draft:</dt>
|
||
<dd class="internet-draft">draft-nennemann-agent-override-protocol-00</dd>
|
||
<dt class="label-published">Published:</dt>
|
||
<dd class="published">
|
||
<time datetime="2026-03-06" class="published">6 March 2026</time>
|
||
</dd>
|
||
<dt class="label-intended-status">Intended Status:</dt>
|
||
<dd class="intended-status">Standards Track</dd>
|
||
<dt class="label-expires">Expires:</dt>
|
||
<dd class="expires"><time datetime="2026-09-07">7 September 2026</time></dd>
|
||
<dt class="label-authors">Author:</dt>
|
||
<dd class="authors">
|
||
<div class="author">
|
||
<div class="author-name">C. Nennemann</div>
|
||
<div class="org">Independent Researcher</div>
|
||
</div>
|
||
</dd>
|
||
</dl>
|
||
</div>
|
||
<h1 id="title">Standardized Human Override Protocol for Autonomous Agents</h1>
|
||
<section id="section-abstract">
|
||
<h2 id="abstract"><a href="#abstract" class="selfRef">Abstract</a></h2>
|
||
<p id="section-abstract-1">This document defines a cross-vendor interoperable protocol for
|
||
human operators to override autonomous agent decisions at multiple
|
||
authority levels, with verified compliance and audit trails. It
|
||
absorbs and supersedes the override mechanisms described in earlier
|
||
HEOP and HITL drafts, providing a single unified protocol that
|
||
works across agent implementations from different vendors. The
|
||
protocol specifies three override levels (Advisory, Mandatory,
|
||
Emergency), a JWT-based override signal format, multiple delivery
|
||
mechanisms, compliance verification, and graceful degradation
|
||
semantics. Override events are recorded as Execution Context Token
|
||
(ECT) nodes for tamper-evident audit.<a href="#section-abstract-1" class="pilcrow">¶</a></p>
|
||
</section>
|
||
<div id="status-of-memo">
|
||
<section id="section-boilerplate.1">
|
||
<h2 id="name-status-of-this-memo">
|
||
<a href="#name-status-of-this-memo" class="section-name selfRef">Status of This Memo</a>
|
||
</h2>
|
||
<p id="section-boilerplate.1-1">
|
||
This Internet-Draft is submitted in full conformance with the
|
||
provisions of BCP 78 and BCP 79.<a href="#section-boilerplate.1-1" class="pilcrow">¶</a></p>
|
||
<p id="section-boilerplate.1-2">
|
||
Internet-Drafts are working documents of the Internet Engineering Task
|
||
Force (IETF). Note that other groups may also distribute working
|
||
documents as Internet-Drafts. The list of current Internet-Drafts is
|
||
at <span><a href="https://datatracker.ietf.org/drafts/current/">https://datatracker.ietf.org/drafts/current/</a></span>.<a href="#section-boilerplate.1-2" class="pilcrow">¶</a></p>
|
||
<p id="section-boilerplate.1-3">
|
||
Internet-Drafts are draft documents valid for a maximum of six months
|
||
and may be updated, replaced, or obsoleted by other documents at any
|
||
time. It is inappropriate to use Internet-Drafts as reference
|
||
material or to cite them other than as "work in progress."<a href="#section-boilerplate.1-3" class="pilcrow">¶</a></p>
|
||
<p id="section-boilerplate.1-4">
|
||
This Internet-Draft will expire on 7 September 2026.<a href="#section-boilerplate.1-4" class="pilcrow">¶</a></p>
|
||
</section>
|
||
</div>
|
||
<div id="copyright">
|
||
<section id="section-boilerplate.2">
|
||
<h2 id="name-copyright-notice">
|
||
<a href="#name-copyright-notice" class="section-name selfRef">Copyright Notice</a>
|
||
</h2>
|
||
<p id="section-boilerplate.2-1">
|
||
Copyright (c) 2026 IETF Trust and the persons identified as the
|
||
document authors. All rights reserved.<a href="#section-boilerplate.2-1" class="pilcrow">¶</a></p>
|
||
<p id="section-boilerplate.2-2">
|
||
This document is subject to BCP 78 and the IETF Trust's Legal
|
||
Provisions Relating to IETF Documents
|
||
(<span><a href="https://trustee.ietf.org/license-info">https://trustee.ietf.org/license-info</a></span>) in effect on the date of
|
||
publication of this document. Please review these documents
|
||
carefully, as they describe your rights and restrictions with
|
||
respect to this document. Code Components extracted from this
|
||
document must include Revised BSD License text as described in
|
||
Section 4.e of the Trust Legal Provisions and are provided without
|
||
warranty as described in the Revised BSD License.<a href="#section-boilerplate.2-2" class="pilcrow">¶</a></p>
|
||
</section>
|
||
</div>
|
||
<div id="toc">
|
||
<section id="section-toc.1">
|
||
<a href="#" onclick="scroll(0,0)" class="toplink">▲</a><h2 id="name-table-of-contents">
|
||
<a href="#name-table-of-contents" class="section-name selfRef">Table of Contents</a>
|
||
</h2>
|
||
<nav class="toc"><ul class="compact toc ulBare ulEmpty">
|
||
<li class="compact toc ulBare ulEmpty" id="section-toc.1-1.1">
|
||
<p id="section-toc.1-1.1.1" class="keepWithNext"><a href="#section-1" class="auto internal xref">1</a>. <a href="#name-introduction" class="internal xref">Introduction</a></p>
|
||
</li>
|
||
<li class="compact toc ulBare ulEmpty" id="section-toc.1-1.2">
|
||
<p id="section-toc.1-1.2.1" class="keepWithNext"><a href="#section-2" class="auto internal xref">2</a>. <a href="#name-terminology" class="internal xref">Terminology</a></p>
|
||
</li>
|
||
<li class="compact toc ulBare ulEmpty" id="section-toc.1-1.3">
|
||
<p id="section-toc.1-1.3.1"><a href="#section-3" class="auto internal xref">3</a>. <a href="#name-override-protocol" class="internal xref">Override Protocol</a></p>
|
||
<ul class="compact toc ulBare ulEmpty">
|
||
<li class="compact toc ulBare ulEmpty" id="section-toc.1-1.3.2.1">
|
||
<p id="section-toc.1-1.3.2.1.1" class="keepWithNext"><a href="#section-3.1" class="auto internal xref">3.1</a>. <a href="#name-override-architecture" class="internal xref">Override Architecture</a></p>
|
||
</li>
|
||
<li class="compact toc ulBare ulEmpty" id="section-toc.1-1.3.2.2">
|
||
<p id="section-toc.1-1.3.2.2.1"><a href="#section-3.2" class="auto internal xref">3.2</a>. <a href="#name-override-authority-levels" class="internal xref">Override Authority Levels</a></p>
|
||
<ul class="compact toc ulBare ulEmpty">
|
||
<li class="compact toc ulBare ulEmpty" id="section-toc.1-1.3.2.2.2.1">
|
||
<p id="section-toc.1-1.3.2.2.2.1.1"><a href="#section-3.2.1" class="auto internal xref">3.2.1</a>. <a href="#name-level-1-advisory" class="internal xref">Level 1: Advisory</a></p>
|
||
</li>
|
||
<li class="compact toc ulBare ulEmpty" id="section-toc.1-1.3.2.2.2.2">
|
||
<p id="section-toc.1-1.3.2.2.2.2.1"><a href="#section-3.2.2" class="auto internal xref">3.2.2</a>. <a href="#name-level-2-mandatory" class="internal xref">Level 2: Mandatory</a></p>
|
||
</li>
|
||
<li class="compact toc ulBare ulEmpty" id="section-toc.1-1.3.2.2.2.3">
|
||
<p id="section-toc.1-1.3.2.2.2.3.1"><a href="#section-3.2.3" class="auto internal xref">3.2.3</a>. <a href="#name-level-3-emergency" class="internal xref">Level 3: Emergency</a></p>
|
||
</li>
|
||
<li class="compact toc ulBare ulEmpty" id="section-toc.1-1.3.2.2.2.4">
|
||
<p id="section-toc.1-1.3.2.2.2.4.1"><a href="#section-3.2.4" class="auto internal xref">3.2.4</a>. <a href="#name-authority-delegation-and-ch" class="internal xref">Authority Delegation and Chain of Command</a></p>
|
||
</li>
|
||
</ul>
|
||
</li>
|
||
<li class="compact toc ulBare ulEmpty" id="section-toc.1-1.3.2.3">
|
||
<p id="section-toc.1-1.3.2.3.1"><a href="#section-3.3" class="auto internal xref">3.3</a>. <a href="#name-override-scope" class="internal xref">Override Scope</a></p>
|
||
<ul class="compact toc ulBare ulEmpty">
|
||
<li class="compact toc ulBare ulEmpty" id="section-toc.1-1.3.2.3.2.1">
|
||
<p id="section-toc.1-1.3.2.3.2.1.1"><a href="#section-3.3.1" class="auto internal xref">3.3.1</a>. <a href="#name-single-agent-override" class="internal xref">Single Agent Override</a></p>
|
||
</li>
|
||
<li class="compact toc ulBare ulEmpty" id="section-toc.1-1.3.2.3.2.2">
|
||
<p id="section-toc.1-1.3.2.3.2.2.1"><a href="#section-3.3.2" class="auto internal xref">3.3.2</a>. <a href="#name-agent-group-override" class="internal xref">Agent Group Override</a></p>
|
||
</li>
|
||
<li class="compact toc ulBare ulEmpty" id="section-toc.1-1.3.2.3.2.3">
|
||
<p id="section-toc.1-1.3.2.3.2.3.1"><a href="#section-3.3.3" class="auto internal xref">3.3.3</a>. <a href="#name-workflow-wide-override" class="internal xref">Workflow-Wide Override</a></p>
|
||
</li>
|
||
<li class="compact toc ulBare ulEmpty" id="section-toc.1-1.3.2.3.2.4">
|
||
<p id="section-toc.1-1.3.2.3.2.4.1"><a href="#section-3.3.4" class="auto internal xref">3.3.4</a>. <a href="#name-domain-wide-override" class="internal xref">Domain-Wide Override</a></p>
|
||
</li>
|
||
</ul>
|
||
</li>
|
||
<li class="compact toc ulBare ulEmpty" id="section-toc.1-1.3.2.4">
|
||
<p id="section-toc.1-1.3.2.4.1"><a href="#section-3.4" class="auto internal xref">3.4</a>. <a href="#name-override-signal-format" class="internal xref">Override Signal Format</a></p>
|
||
<ul class="compact toc ulBare ulEmpty">
|
||
<li class="compact toc ulBare ulEmpty" id="section-toc.1-1.3.2.4.2.1">
|
||
<p id="section-toc.1-1.3.2.4.2.1.1"><a href="#section-3.4.1" class="auto internal xref">3.4.1</a>. <a href="#name-delivery-mechanisms" class="internal xref">Delivery Mechanisms</a></p>
|
||
</li>
|
||
</ul>
|
||
</li>
|
||
<li class="compact toc ulBare ulEmpty" id="section-toc.1-1.3.2.5">
|
||
<p id="section-toc.1-1.3.2.5.1"><a href="#section-3.5" class="auto internal xref">3.5</a>. <a href="#name-override-endpoint-discovery" class="internal xref">Override Endpoint Discovery</a></p>
|
||
</li>
|
||
</ul>
|
||
</li>
|
||
<li class="compact toc ulBare ulEmpty" id="section-toc.1-1.4">
|
||
<p id="section-toc.1-1.4.1"><a href="#section-4" class="auto internal xref">4</a>. <a href="#name-compliance-and-verification" class="internal xref">Compliance and Verification</a></p>
|
||
<ul class="compact toc ulBare ulEmpty">
|
||
<li class="compact toc ulBare ulEmpty" id="section-toc.1-1.4.2.1">
|
||
<p id="section-toc.1-1.4.2.1.1"><a href="#section-4.1" class="auto internal xref">4.1</a>. <a href="#name-acknowledgment-protocol" class="internal xref">Acknowledgment Protocol</a></p>
|
||
<ul class="compact toc ulBare ulEmpty">
|
||
<li class="compact toc ulBare ulEmpty" id="section-toc.1-1.4.2.1.2.1">
|
||
<p id="section-toc.1-1.4.2.1.2.1.1"><a href="#section-4.1.1" class="auto internal xref">4.1.1</a>. <a href="#name-override-receipt-acknowledg" class="internal xref">Override Receipt Acknowledgment</a></p>
|
||
</li>
|
||
<li class="compact toc ulBare ulEmpty" id="section-toc.1-1.4.2.1.2.2">
|
||
<p id="section-toc.1-1.4.2.1.2.2.1"><a href="#section-4.1.2" class="auto internal xref">4.1.2</a>. <a href="#name-compliance-confirmation" class="internal xref">Compliance Confirmation</a></p>
|
||
</li>
|
||
<li class="compact toc ulBare ulEmpty" id="section-toc.1-1.4.2.1.2.3">
|
||
<p id="section-toc.1-1.4.2.1.2.3.1"><a href="#section-4.1.3" class="auto internal xref">4.1.3</a>. <a href="#name-non-compliance-reporting-an" class="internal xref">Non-Compliance Reporting and Escalation</a></p>
|
||
</li>
|
||
</ul>
|
||
</li>
|
||
<li class="compact toc ulBare ulEmpty" id="section-toc.1-1.4.2.2">
|
||
<p id="section-toc.1-1.4.2.2.1"><a href="#section-4.2" class="auto internal xref">4.2</a>. <a href="#name-compliance-verification" class="internal xref">Compliance Verification</a></p>
|
||
<ul class="compact toc ulBare ulEmpty">
|
||
<li class="compact toc ulBare ulEmpty" id="section-toc.1-1.4.2.2.2.1">
|
||
<p id="section-toc.1-1.4.2.2.2.1.1"><a href="#section-4.2.1" class="auto internal xref">4.2.1</a>. <a href="#name-behavioral-verification-pos" class="internal xref">Behavioral Verification Post-Override</a></p>
|
||
</li>
|
||
<li class="compact toc ulBare ulEmpty" id="section-toc.1-1.4.2.2.2.2">
|
||
<p id="section-toc.1-1.4.2.2.2.2.1"><a href="#section-4.2.2" class="auto internal xref">4.2.2</a>. <a href="#name-timeout-and-retry-semantics" class="internal xref">Timeout and Retry Semantics</a></p>
|
||
</li>
|
||
</ul>
|
||
</li>
|
||
<li class="compact toc ulBare ulEmpty" id="section-toc.1-1.4.2.3">
|
||
<p id="section-toc.1-1.4.2.3.1"><a href="#section-4.3" class="auto internal xref">4.3</a>. <a href="#name-graceful-degradation" class="internal xref">Graceful Degradation</a></p>
|
||
<ul class="compact toc ulBare ulEmpty">
|
||
<li class="compact toc ulBare ulEmpty" id="section-toc.1-1.4.2.3.2.1">
|
||
<p id="section-toc.1-1.4.2.3.2.1.1"><a href="#section-4.3.1" class="auto internal xref">4.3.1</a>. <a href="#name-unreachable-override-target" class="internal xref">Unreachable Override Target</a></p>
|
||
</li>
|
||
<li class="compact toc ulBare ulEmpty" id="section-toc.1-1.4.2.3.2.2">
|
||
<p id="section-toc.1-1.4.2.3.2.2.1"><a href="#section-4.3.2" class="auto internal xref">4.3.2</a>. <a href="#name-failsafe-defaults" class="internal xref">Failsafe Defaults</a></p>
|
||
</li>
|
||
<li class="compact toc ulBare ulEmpty" id="section-toc.1-1.4.2.3.2.3">
|
||
<p id="section-toc.1-1.4.2.3.2.3.1"><a href="#section-4.3.3" class="auto internal xref">4.3.3</a>. <a href="#name-proxy-override-for-offline-" class="internal xref">Proxy Override for Offline Agents</a></p>
|
||
</li>
|
||
</ul>
|
||
</li>
|
||
</ul>
|
||
</li>
|
||
<li class="compact toc ulBare ulEmpty" id="section-toc.1-1.5">
|
||
<p id="section-toc.1-1.5.1"><a href="#section-5" class="auto internal xref">5</a>. <a href="#name-integration-with-acp-dag-hi" class="internal xref">Integration with ACP-DAG-HITL and ECT</a></p>
|
||
<ul class="compact toc ulBare ulEmpty">
|
||
<li class="compact toc ulBare ulEmpty" id="section-toc.1-1.5.2.1">
|
||
<p id="section-toc.1-1.5.2.1.1"><a href="#section-5.1" class="auto internal xref">5.1</a>. <a href="#name-override-authorization-via-" class="internal xref">Override Authorization via ACP Policy</a></p>
|
||
</li>
|
||
<li class="compact toc ulBare ulEmpty" id="section-toc.1-1.5.2.2">
|
||
<p id="section-toc.1-1.5.2.2.1"><a href="#section-5.2" class="auto internal xref">5.2</a>. <a href="#name-override-events-as-ect-node" class="internal xref">Override Events as ECT Nodes</a></p>
|
||
</li>
|
||
<li class="compact toc ulBare ulEmpty" id="section-toc.1-1.5.2.3">
|
||
<p id="section-toc.1-1.5.2.3.1"><a href="#section-5.3" class="auto internal xref">5.3</a>. <a href="#name-override-audit-trail" class="internal xref">Override Audit Trail</a></p>
|
||
</li>
|
||
</ul>
|
||
</li>
|
||
<li class="compact toc ulBare ulEmpty" id="section-toc.1-1.6">
|
||
<p id="section-toc.1-1.6.1"><a href="#section-6" class="auto internal xref">6</a>. <a href="#name-security-considerations" class="internal xref">Security Considerations</a></p>
|
||
<ul class="compact toc ulBare ulEmpty">
|
||
<li class="compact toc ulBare ulEmpty" id="section-toc.1-1.6.2.1">
|
||
<p id="section-toc.1-1.6.2.1.1"><a href="#section-6.1" class="auto internal xref">6.1</a>. <a href="#name-unauthorized-override-attem" class="internal xref">Unauthorized Override Attempts</a></p>
|
||
</li>
|
||
<li class="compact toc ulBare ulEmpty" id="section-toc.1-1.6.2.2">
|
||
<p id="section-toc.1-1.6.2.2.1"><a href="#section-6.2" class="auto internal xref">6.2</a>. <a href="#name-replay-protection-for-overr" class="internal xref">Replay Protection for Override Signals</a></p>
|
||
</li>
|
||
<li class="compact toc ulBare ulEmpty" id="section-toc.1-1.6.2.3">
|
||
<p id="section-toc.1-1.6.2.3.1"><a href="#section-6.3" class="auto internal xref">6.3</a>. <a href="#name-override-signal-tampering" class="internal xref">Override Signal Tampering</a></p>
|
||
</li>
|
||
<li class="compact toc ulBare ulEmpty" id="section-toc.1-1.6.2.4">
|
||
<p id="section-toc.1-1.6.2.4.1"><a href="#section-6.4" class="auto internal xref">6.4</a>. <a href="#name-denial-of-service-via-overr" class="internal xref">Denial-of-Service via Override Flooding</a></p>
|
||
</li>
|
||
<li class="compact toc ulBare ulEmpty" id="section-toc.1-1.6.2.5">
|
||
<p id="section-toc.1-1.6.2.5.1"><a href="#section-6.5" class="auto internal xref">6.5</a>. <a href="#name-authority-impersonation" class="internal xref">Authority Impersonation</a></p>
|
||
</li>
|
||
</ul>
|
||
</li>
|
||
<li class="compact toc ulBare ulEmpty" id="section-toc.1-1.7">
|
||
<p id="section-toc.1-1.7.1"><a href="#section-7" class="auto internal xref">7</a>. <a href="#name-iana-considerations" class="internal xref">IANA Considerations</a></p>
|
||
<ul class="compact toc ulBare ulEmpty">
|
||
<li class="compact toc ulBare ulEmpty" id="section-toc.1-1.7.2.1">
|
||
<p id="section-toc.1-1.7.2.1.1"><a href="#section-7.1" class="auto internal xref">7.1</a>. <a href="#name-well-known-uri-registration" class="internal xref">Well-Known URI Registration</a></p>
|
||
</li>
|
||
<li class="compact toc ulBare ulEmpty" id="section-toc.1-1.7.2.2">
|
||
<p id="section-toc.1-1.7.2.2.1"><a href="#section-7.2" class="auto internal xref">7.2</a>. <a href="#name-override-exec_act-values" class="internal xref">Override exec_act Values</a></p>
|
||
</li>
|
||
<li class="compact toc ulBare ulEmpty" id="section-toc.1-1.7.2.3">
|
||
<p id="section-toc.1-1.7.2.3.1"><a href="#section-7.3" class="auto internal xref">7.3</a>. <a href="#name-override-jwt-claims" class="internal xref">Override JWT Claims</a></p>
|
||
</li>
|
||
</ul>
|
||
</li>
|
||
<li class="compact toc ulBare ulEmpty" id="section-toc.1-1.8">
|
||
<p id="section-toc.1-1.8.1"><a href="#section-8" class="auto internal xref">8</a>. <a href="#name-references" class="internal xref">References</a></p>
|
||
<ul class="compact toc ulBare ulEmpty">
|
||
<li class="compact toc ulBare ulEmpty" id="section-toc.1-1.8.2.1">
|
||
<p id="section-toc.1-1.8.2.1.1"><a href="#section-8.1" class="auto internal xref">8.1</a>. <a href="#name-normative-references" class="internal xref">Normative References</a></p>
|
||
</li>
|
||
<li class="compact toc ulBare ulEmpty" id="section-toc.1-1.8.2.2">
|
||
<p id="section-toc.1-1.8.2.2.1"><a href="#section-8.2" class="auto internal xref">8.2</a>. <a href="#name-informative-references" class="internal xref">Informative References</a></p>
|
||
</li>
|
||
</ul>
|
||
</li>
|
||
<li class="compact toc ulBare ulEmpty" id="section-toc.1-1.9">
|
||
<p id="section-toc.1-1.9.1"><a href="#appendix-A" class="auto internal xref"></a><a href="#name-acknowledgments" class="internal xref">Acknowledgments</a></p>
|
||
</li>
|
||
<li class="compact toc ulBare ulEmpty" id="section-toc.1-1.10">
|
||
<p id="section-toc.1-1.10.1"><a href="#appendix-B" class="auto internal xref"></a><a href="#name-authors-address" class="internal xref">Author's Address</a></p>
|
||
</li>
|
||
</ul>
|
||
</nav>
|
||
</section>
|
||
</div>
|
||
<div id="introduction">
|
||
<section id="section-1">
|
||
<h2 id="name-introduction">
|
||
<a href="#section-1" class="section-number selfRef">1. </a><a href="#name-introduction" class="section-name selfRef">Introduction</a>
|
||
</h2>
|
||
<p id="section-1-1">Gap 7 of the agentic AI gap analysis
|
||
<span>[<a href="#I-D.nennemann-agent-gap-analysis" class="cite xref">I-D.nennemann-agent-gap-analysis</a>]</span> identifies the absence of a
|
||
standardized human override mechanism as a critical deficiency.
|
||
Current human-in-the-loop (HITL) mechanisms are vendor-specific:
|
||
each agent platform implements its own override interface,
|
||
authentication scheme, and compliance model. When agents from
|
||
different vendors collaborate in a shared workflow, there is no
|
||
universal mechanism for a human operator to intervene.<a href="#section-1-1" class="pilcrow">¶</a></p>
|
||
<p id="section-1-2">Earlier drafts addressed portions of this problem. The Human
|
||
Emergency Override Protocol (HEOP) defined four override levels
|
||
with ECT integration. The HITL Primitives draft added approval
|
||
gates, explainability tokens, and timeout policies. This document
|
||
absorbs and supersedes the override protocol aspects of both,
|
||
providing a single cross-vendor interoperable specification.<a href="#section-1-2" class="pilcrow">¶</a></p>
|
||
<p id="section-1-3">The design draws from industrial safety: the emergency stop button
|
||
on factory equipment, the circuit breaker in electrical systems, and
|
||
the kill switch in robotics. The override mechanism must be simpler
|
||
and more reliable than the system it controls.<a href="#section-1-3" class="pilcrow">¶</a></p>
|
||
<p id="section-1-4">The protocol integrates with the Agent Context Policy Token
|
||
<span>[<a href="#I-D.nennemann-agent-dag-hitl-safety" class="cite xref">I-D.nennemann-agent-dag-hitl-safety</a>]</span> for authorization and with
|
||
the Execution Context Token <span>[<a href="#I-D.nennemann-wimse-ect" class="cite xref">I-D.nennemann-wimse-ect</a>]</span> for audit.<a href="#section-1-4" class="pilcrow">¶</a></p>
|
||
</section>
|
||
</div>
|
||
<div id="terminology">
|
||
<section id="section-2">
|
||
<h2 id="name-terminology">
|
||
<a href="#section-2" class="section-number selfRef">2. </a><a href="#name-terminology" class="section-name selfRef">Terminology</a>
|
||
</h2>
|
||
<p id="section-2-1">The key words "<span class="bcp14">MUST</span>", "<span class="bcp14">MUST NOT</span>", "<span class="bcp14">REQUIRED</span>", "<span class="bcp14">SHALL</span>", "<span class="bcp14">SHALL NOT</span>", "<span class="bcp14">SHOULD</span>", "<span class="bcp14">SHOULD NOT</span>", "<span class="bcp14">RECOMMENDED</span>", "<span class="bcp14">NOT RECOMMENDED</span>",
|
||
"<span class="bcp14">MAY</span>", and "<span class="bcp14">OPTIONAL</span>" in this document are to be interpreted as
|
||
described in BCP 14 <span>[<a href="#RFC2119" class="cite xref">RFC2119</a>]</span> <span>[<a href="#RFC8174" class="cite xref">RFC8174</a>]</span> when, and only when, they
|
||
appear in all capitals, as shown here.<a href="#section-2-1" class="pilcrow">¶</a></p>
|
||
<span class="break"></span><dl class="dlParallel" id="section-2-2">
|
||
<dt id="section-2-2.1">Override Signal:</dt>
|
||
<dd style="margin-left: 1.5em" id="section-2-2.2">
|
||
<p id="section-2-2.2.1">A signed message from an authorized human operator directing one
|
||
or more agents to change their autonomous behavior.<a href="#section-2-2.2.1" class="pilcrow">¶</a></p>
|
||
</dd>
|
||
<dd class="break"></dd>
|
||
<dt id="section-2-2.3">Override Authority:</dt>
|
||
<dd style="margin-left: 1.5em" id="section-2-2.4">
|
||
<p id="section-2-2.4.1">The authenticated identity and role of a human operator authorized
|
||
to issue override signals, as defined in ACP-DAG-HITL policy.<a href="#section-2-2.4.1" class="pilcrow">¶</a></p>
|
||
</dd>
|
||
<dd class="break"></dd>
|
||
<dt id="section-2-2.5">Override Scope:</dt>
|
||
<dd style="margin-left: 1.5em" id="section-2-2.6">
|
||
<p id="section-2-2.6.1">The set of agents or agent functions targeted by an override
|
||
signal.<a href="#section-2-2.6.1" class="pilcrow">¶</a></p>
|
||
</dd>
|
||
<dd class="break"></dd>
|
||
<dt id="section-2-2.7">Override Level:</dt>
|
||
<dd style="margin-left: 1.5em" id="section-2-2.8">
|
||
<p id="section-2-2.8.1">One of three escalating intervention types: Advisory (Level 1),
|
||
Mandatory (Level 2), or Emergency (Level 3).<a href="#section-2-2.8.1" class="pilcrow">¶</a></p>
|
||
</dd>
|
||
<dd class="break"></dd>
|
||
<dt id="section-2-2.9">Compliance Verification:</dt>
|
||
<dd style="margin-left: 1.5em" id="section-2-2.10">
|
||
<p id="section-2-2.10.1">The process of confirming that an agent has changed its behavior
|
||
in accordance with an override signal.<a href="#section-2-2.10.1" class="pilcrow">¶</a></p>
|
||
</dd>
|
||
<dd class="break"></dd>
|
||
<dt id="section-2-2.11">Acknowledgment:</dt>
|
||
<dd style="margin-left: 1.5em" id="section-2-2.12">
|
||
<p id="section-2-2.12.1">A signed response from an agent confirming receipt and processing
|
||
of an override signal.<a href="#section-2-2.12.1" class="pilcrow">¶</a></p>
|
||
</dd>
|
||
<dd class="break"></dd>
|
||
<dt id="section-2-2.13">Graceful Degradation:</dt>
|
||
<dd style="margin-left: 1.5em" id="section-2-2.14">
|
||
<p id="section-2-2.14.1">The behavior of the override system when the target agent is
|
||
unreachable or non-responsive.<a href="#section-2-2.14.1" class="pilcrow">¶</a></p>
|
||
</dd>
|
||
<dd class="break"></dd>
|
||
<dt id="section-2-2.15">Kill Switch:</dt>
|
||
<dd style="margin-left: 1.5em" id="section-2-2.16">
|
||
<p id="section-2-2.16.1">An Emergency (Level 3) override that requires immediate cessation
|
||
of all autonomous agent activity.<a href="#section-2-2.16.1" class="pilcrow">¶</a></p>
|
||
</dd>
|
||
<dd class="break"></dd>
|
||
</dl>
|
||
</section>
|
||
</div>
|
||
<div id="override-protocol">
|
||
<section id="section-3">
|
||
<h2 id="name-override-protocol">
|
||
<a href="#section-3" class="section-number selfRef">3. </a><a href="#name-override-protocol" class="section-name selfRef">Override Protocol</a>
|
||
</h2>
|
||
<div id="override-architecture">
|
||
<section id="section-3.1">
|
||
<h3 id="name-override-architecture">
|
||
<a href="#section-3.1" class="section-number selfRef">3.1. </a><a href="#name-override-architecture" class="section-name selfRef">Override Architecture</a>
|
||
</h3>
|
||
<p id="section-3.1-1">The following diagram illustrates the override signal flow from a
|
||
human operator through the override system to the target agent(s):<a href="#section-3.1-1" class="pilcrow">¶</a></p>
|
||
<span id="name-override-architecture-2"></span><div id="fig-architecture">
|
||
<figure id="figure-1">
|
||
<div class="alignLeft art-text artwork" id="section-3.1-2.1">
|
||
<pre>
|
||
+----------+ Override Signal +------------------+
|
||
| Human |--(JWT-signed msg)--->| Override |
|
||
| Operator | | Dispatcher |
|
||
+----------+ +------------------+
|
||
^ | | |
|
||
| +---------+ | +---------+
|
||
| v v v
|
||
| +---------+ +---------+ +---------+
|
||
| | Agent A | | Agent B | | Agent C |
|
||
| | (push) | | (pull) | | (bcast) |
|
||
| +---------+ +---------+ +---------+
|
||
| | | |
|
||
+-----(Ack ECT)-----+-----(Ack)---+-----(Ack)---+
|
||
| | |
|
||
+----v-------------v-------------v----+
|
||
| Compliance Verification |
|
||
| & Audit Trail (ECT DAG) |
|
||
+-------------------------------------+
|
||
</pre>
|
||
</div>
|
||
<figcaption><a href="#figure-1" class="selfRef">Figure 1</a>:
|
||
<a href="#name-override-architecture-2" class="selfRef">Override Architecture</a>
|
||
</figcaption></figure>
|
||
</div>
|
||
<p id="section-3.1-3">The Override Dispatcher receives the operator's signed override
|
||
signal and routes it to target agents via the appropriate delivery
|
||
mechanism. Each agent acknowledges the override with an ECT. The
|
||
compliance verification layer monitors agent behavior to confirm
|
||
the override was applied.<a href="#section-3.1-3" class="pilcrow">¶</a></p>
|
||
</section>
|
||
</div>
|
||
<div id="override-authority-levels">
|
||
<section id="section-3.2">
|
||
<h3 id="name-override-authority-levels">
|
||
<a href="#section-3.2" class="section-number selfRef">3.2. </a><a href="#name-override-authority-levels" class="section-name selfRef">Override Authority Levels</a>
|
||
</h3>
|
||
<div id="level-1-advisory">
|
||
<section id="section-3.2.1">
|
||
<h4 id="name-level-1-advisory">
|
||
<a href="#section-3.2.1" class="section-number selfRef">3.2.1. </a><a href="#name-level-1-advisory" class="section-name selfRef">Level 1: Advisory</a>
|
||
</h4>
|
||
<p id="section-3.2.1-1">An Advisory override is a suggestion for the agent to reconsider
|
||
its current course of action. The agent <span class="bcp14">MAY</span> comply with an
|
||
Advisory override. If the agent does not comply, it <span class="bcp14">MUST</span>
|
||
acknowledge receipt and provide a reason for non-compliance.<a href="#section-3.2.1-1" class="pilcrow">¶</a></p>
|
||
<p id="section-3.2.1-2">Advisory overrides are appropriate when the operator wants to
|
||
influence agent behavior without mandating a specific outcome.<a href="#section-3.2.1-2" class="pilcrow">¶</a></p>
|
||
</section>
|
||
</div>
|
||
<div id="level-2-mandatory">
|
||
<section id="section-3.2.2">
|
||
<h4 id="name-level-2-mandatory">
|
||
<a href="#section-3.2.2" class="section-number selfRef">3.2.2. </a><a href="#name-level-2-mandatory" class="section-name selfRef">Level 2: Mandatory</a>
|
||
</h4>
|
||
<p id="section-3.2.2-1">A Mandatory override is a directive for the agent to change its
|
||
behavior. The agent <span class="bcp14">MUST</span> comply with a Mandatory override. The
|
||
agent <span class="bcp14">MUST</span> alter its behavior as specified in the override signal
|
||
and confirm compliance.<a href="#section-3.2.2-1" class="pilcrow">¶</a></p>
|
||
<p id="section-3.2.2-2">Mandatory overrides are appropriate when the operator requires a
|
||
specific behavioral change but the situation does not require
|
||
immediate cessation of all activity.<a href="#section-3.2.2-2" class="pilcrow">¶</a></p>
|
||
</section>
|
||
</div>
|
||
<div id="level-3-emergency">
|
||
<section id="section-3.2.3">
|
||
<h4 id="name-level-3-emergency">
|
||
<a href="#section-3.2.3" class="section-number selfRef">3.2.3. </a><a href="#name-level-3-emergency" class="section-name selfRef">Level 3: Emergency</a>
|
||
</h4>
|
||
<p id="section-3.2.3-1">An Emergency override requires immediate halt of all autonomous
|
||
agent activity. The agent <span class="bcp14">MUST</span> stop all autonomous actions
|
||
immediately upon receipt. The agent <span class="bcp14">MUST NOT</span> initiate any new
|
||
actions until explicitly released by an authorized operator.
|
||
This is the kill switch.<a href="#section-3.2.3-1" class="pilcrow">¶</a></p>
|
||
<p id="section-3.2.3-2">Emergency overrides are appropriate in safety-critical situations
|
||
where continued autonomous operation poses unacceptable risk.
|
||
The agent <span class="bcp14">MUST</span> process Emergency overrides within 1 second of
|
||
receipt. The override processing path <span class="bcp14">MUST</span> be independent of
|
||
the agent's main processing loop.<a href="#section-3.2.3-2" class="pilcrow">¶</a></p>
|
||
</section>
|
||
</div>
|
||
<div id="authority-delegation-and-chain-of-command">
|
||
<section id="section-3.2.4">
|
||
<h4 id="name-authority-delegation-and-ch">
|
||
<a href="#section-3.2.4" class="section-number selfRef">3.2.4. </a><a href="#name-authority-delegation-and-ch" class="section-name selfRef">Authority Delegation and Chain of Command</a>
|
||
</h4>
|
||
<p id="section-3.2.4-1">Override authority is derived from ACP-DAG-HITL policy. The
|
||
policy defines which operator roles are authorized for each
|
||
override level:<a href="#section-3.2.4-1" class="pilcrow">¶</a></p>
|
||
<ul class="normal">
|
||
<li class="normal" id="section-3.2.4-2.1">
|
||
<p id="section-3.2.4-2.1.1">Level 1 (Advisory): Any operator with <code>advisory_override</code> role<a href="#section-3.2.4-2.1.1" class="pilcrow">¶</a></p>
|
||
</li>
|
||
<li class="normal" id="section-3.2.4-2.2">
|
||
<p id="section-3.2.4-2.2.1">Level 2 (Mandatory): Operators with <code>mandatory_override</code> role<a href="#section-3.2.4-2.2.1" class="pilcrow">¶</a></p>
|
||
</li>
|
||
<li class="normal" id="section-3.2.4-2.3">
|
||
<p id="section-3.2.4-2.3.1">Level 3 (Emergency): Operators with <code>emergency_override</code> role<a href="#section-3.2.4-2.3.1" class="pilcrow">¶</a></p>
|
||
</li>
|
||
</ul>
|
||
<p id="section-3.2.4-3">An operator with a higher-level role implicitly holds all
|
||
lower-level roles. Authority delegation (one operator authorizing
|
||
another to act on their behalf) <span class="bcp14">MUST</span> be recorded as an ECT and
|
||
<span class="bcp14">MUST</span> be time-bounded.<a href="#section-3.2.4-3" class="pilcrow">¶</a></p>
|
||
</section>
|
||
</div>
|
||
</section>
|
||
</div>
|
||
<div id="override-scope">
|
||
<section id="section-3.3">
|
||
<h3 id="name-override-scope">
|
||
<a href="#section-3.3" class="section-number selfRef">3.3. </a><a href="#name-override-scope" class="section-name selfRef">Override Scope</a>
|
||
</h3>
|
||
<div id="single-agent-override">
|
||
<section id="section-3.3.1">
|
||
<h4 id="name-single-agent-override">
|
||
<a href="#section-3.3.1" class="section-number selfRef">3.3.1. </a><a href="#name-single-agent-override" class="section-name selfRef">Single Agent Override</a>
|
||
</h4>
|
||
<p id="section-3.3.1-1">Targets a specific agent identified by its agent identifier
|
||
(e.g., a SPIFFE ID). The override signal contains a single
|
||
<code>target</code> value.<a href="#section-3.3.1-1" class="pilcrow">¶</a></p>
|
||
</section>
|
||
</div>
|
||
<div id="agent-group-override">
|
||
<section id="section-3.3.2">
|
||
<h4 id="name-agent-group-override">
|
||
<a href="#section-3.3.2" class="section-number selfRef">3.3.2. </a><a href="#name-agent-group-override" class="section-name selfRef">Agent Group Override</a>
|
||
</h4>
|
||
<p id="section-3.3.2-1">Targets a set of agents identified by a tag or label. The
|
||
override signal contains a <code>target_group</code> value that matches
|
||
agents sharing a common label (e.g., <code>group:firewall-agents</code>).<a href="#section-3.3.2-1" class="pilcrow">¶</a></p>
|
||
</section>
|
||
</div>
|
||
<div id="workflow-wide-override">
|
||
<section id="section-3.3.3">
|
||
<h4 id="name-workflow-wide-override">
|
||
<a href="#section-3.3.3" class="section-number selfRef">3.3.3. </a><a href="#name-workflow-wide-override" class="section-name selfRef">Workflow-Wide Override</a>
|
||
</h4>
|
||
<p id="section-3.3.3-1">Targets all agents participating in a specific workflow DAG.
|
||
The override signal contains a <code>target_workflow</code> value
|
||
referencing the workflow identifier.<a href="#section-3.3.3-1" class="pilcrow">¶</a></p>
|
||
</section>
|
||
</div>
|
||
<div id="domain-wide-override">
|
||
<section id="section-3.3.4">
|
||
<h4 id="name-domain-wide-override">
|
||
<a href="#section-3.3.4" class="section-number selfRef">3.3.4. </a><a href="#name-domain-wide-override" class="section-name selfRef">Domain-Wide Override</a>
|
||
</h4>
|
||
<p id="section-3.3.4-1">Targets all agents within an administrative domain. The
|
||
override signal contains <code>target_domain</code> set to <code>"*"</code> or a
|
||
specific domain identifier.<a href="#section-3.3.4-1" class="pilcrow">¶</a></p>
|
||
</section>
|
||
</div>
|
||
</section>
|
||
</div>
|
||
<div id="override-signal-format">
|
||
<section id="section-3.4">
|
||
<h3 id="name-override-signal-format">
|
||
<a href="#section-3.4" class="section-number selfRef">3.4. </a><a href="#name-override-signal-format" class="section-name selfRef">Override Signal Format</a>
|
||
</h3>
|
||
<p id="section-3.4-1">Override signals are JSON Web Tokens (JWTs) <span>[<a href="#RFC7519" class="cite xref">RFC7519</a>]</span> signed
|
||
by the override authority using JSON Web Signature (JWS)
|
||
<span>[<a href="#RFC7515" class="cite xref">RFC7515</a>]</span>.<a href="#section-3.4-1" class="pilcrow">¶</a></p>
|
||
<p id="section-3.4-2">The JWT payload <span class="bcp14">MUST</span> contain the following claims:<a href="#section-3.4-2" class="pilcrow">¶</a></p>
|
||
<span id="name-override-signal-jwt-payload"></span><div id="fig-signal">
|
||
<figure id="figure-2">
|
||
<div class="lang-json sourcecode" id="section-3.4-3.1">
|
||
<pre>
|
||
{
|
||
"jti": "urn:uuid:f47ac10b-58cc-4372-a567-0e02b2c3d479",
|
||
"iss": "spiffe://example.com/human/alice",
|
||
"iat": 1741042800,
|
||
"override_level": 3,
|
||
"override_scope": {
|
||
"type": "single",
|
||
"target": "spiffe://example.com/agent/firewall-mgr"
|
||
},
|
||
"override_action": "stop",
|
||
"override_reason": "Agent blocking legitimate traffic",
|
||
"override_expiry": 1741046400,
|
||
"nonce": "a3f8b2c1e9d74506"
|
||
}
|
||
</pre>
|
||
</div>
|
||
<figcaption><a href="#figure-2" class="selfRef">Figure 2</a>:
|
||
<a href="#name-override-signal-jwt-payload" class="selfRef">Override Signal JWT Payload</a>
|
||
</figcaption></figure>
|
||
</div>
|
||
<p id="section-3.4-4">Claim definitions:<a href="#section-3.4-4" class="pilcrow">¶</a></p>
|
||
<span class="break"></span><dl class="dlParallel" id="section-3.4-5">
|
||
<dt id="section-3.4-5.1">
|
||
<code>override_level</code>:</dt>
|
||
<dd style="margin-left: 1.5em" id="section-3.4-5.2">
|
||
<p id="section-3.4-5.2.1">Integer 1-3. <span class="bcp14">MUST</span> be present. Specifies the override authority
|
||
level.<a href="#section-3.4-5.2.1" class="pilcrow">¶</a></p>
|
||
</dd>
|
||
<dd class="break"></dd>
|
||
<dt id="section-3.4-5.3">
|
||
<code>override_scope</code>:</dt>
|
||
<dd style="margin-left: 1.5em" id="section-3.4-5.4">
|
||
<p id="section-3.4-5.4.1">Object. <span class="bcp14">MUST</span> be present. Contains <code>type</code> (one of <code>single</code>,
|
||
<code>group</code>, <code>workflow</code>, <code>domain</code>) and the corresponding target
|
||
identifier.<a href="#section-3.4-5.4.1" class="pilcrow">¶</a></p>
|
||
</dd>
|
||
<dd class="break"></dd>
|
||
<dt id="section-3.4-5.5">
|
||
<code>override_action</code>:</dt>
|
||
<dd style="margin-left: 1.5em" id="section-3.4-5.6">
|
||
<p id="section-3.4-5.6.1">String. <span class="bcp14">MUST</span> be present. The action the agent should take.
|
||
Values include <code>reconsider</code>, <code>change_behavior</code>, <code>stop</code>,
|
||
<code>restrict</code>, and <code>resume</code>.<a href="#section-3.4-5.6.1" class="pilcrow">¶</a></p>
|
||
</dd>
|
||
<dd class="break"></dd>
|
||
<dt id="section-3.4-5.7">
|
||
<code>override_reason</code>:</dt>
|
||
<dd style="margin-left: 1.5em" id="section-3.4-5.8">
|
||
<p id="section-3.4-5.8.1">String. <span class="bcp14">MUST</span> be present. Human-readable explanation for the
|
||
override.<a href="#section-3.4-5.8.1" class="pilcrow">¶</a></p>
|
||
</dd>
|
||
<dd class="break"></dd>
|
||
<dt id="section-3.4-5.9">
|
||
<code>override_expiry</code>:</dt>
|
||
<dd style="margin-left: 1.5em" id="section-3.4-5.10">
|
||
<p id="section-3.4-5.10.1">Integer (Unix timestamp) or null. If set, the override expires
|
||
automatically at this time and the agent resumes its prior mode.
|
||
If null, the override persists until explicitly lifted.<a href="#section-3.4-5.10.1" class="pilcrow">¶</a></p>
|
||
</dd>
|
||
<dd class="break"></dd>
|
||
<dt id="section-3.4-5.11">
|
||
<code>nonce</code>:</dt>
|
||
<dd style="margin-left: 1.5em" id="section-3.4-5.12">
|
||
<p id="section-3.4-5.12.1">String. <span class="bcp14">MUST</span> be present. A random value to prevent replay
|
||
attacks.<a href="#section-3.4-5.12.1" class="pilcrow">¶</a></p>
|
||
</dd>
|
||
<dd class="break"></dd>
|
||
</dl>
|
||
<div id="delivery-mechanisms">
|
||
<section id="section-3.4.1">
|
||
<h4 id="name-delivery-mechanisms">
|
||
<a href="#section-3.4.1" class="section-number selfRef">3.4.1. </a><a href="#name-delivery-mechanisms" class="section-name selfRef">Delivery Mechanisms</a>
|
||
</h4>
|
||
<div id="push-webhook">
|
||
<section id="section-3.4.1.1">
|
||
<h5 id="name-push-webhook">
|
||
<a href="#section-3.4.1.1" class="section-number selfRef">3.4.1.1. </a><a href="#name-push-webhook" class="section-name selfRef">Push (Webhook)</a>
|
||
</h5>
|
||
<p id="section-3.4.1.1-1">The override dispatcher sends the signed override signal as an
|
||
HTTP POST <span>[<a href="#RFC9110" class="cite xref">RFC9110</a>]</span> to the agent's override endpoint:<a href="#section-3.4.1.1-1" class="pilcrow">¶</a></p>
|
||
<span id="name-push-delivery"></span><div id="fig-push">
|
||
<figure id="figure-3">
|
||
<div class="alignLeft art-text artwork" id="section-3.4.1.1-2.1">
|
||
<pre>
|
||
POST /.well-known/agent-override HTTP/1.1
|
||
Host: agent.example.com
|
||
Content-Type: application/jose
|
||
Authorization: Bearer <operator-jwt>
|
||
|
||
<signed-override-signal>
|
||
</pre>
|
||
</div>
|
||
<figcaption><a href="#figure-3" class="selfRef">Figure 3</a>:
|
||
<a href="#name-push-delivery" class="selfRef">Push Delivery</a>
|
||
</figcaption></figure>
|
||
</div>
|
||
</section>
|
||
</div>
|
||
<div id="pull-polling-endpoint">
|
||
<section id="section-3.4.1.2">
|
||
<h5 id="name-pull-polling-endpoint">
|
||
<a href="#section-3.4.1.2" class="section-number selfRef">3.4.1.2. </a><a href="#name-pull-polling-endpoint" class="section-name selfRef">Pull (Polling Endpoint)</a>
|
||
</h5>
|
||
<p id="section-3.4.1.2-1">Agents that cannot receive inbound connections <span class="bcp14">MAY</span> poll for
|
||
pending overrides:<a href="#section-3.4.1.2-1" class="pilcrow">¶</a></p>
|
||
<span id="name-pull-delivery"></span><div id="fig-pull">
|
||
<figure id="figure-4">
|
||
<div class="alignLeft art-text artwork" id="section-3.4.1.2-2.1">
|
||
<pre>
|
||
GET /.well-known/agent-override/pending HTTP/1.1
|
||
Host: override-service.example.com
|
||
Authorization: Bearer <agent-jwt>
|
||
</pre>
|
||
</div>
|
||
<figcaption><a href="#figure-4" class="selfRef">Figure 4</a>:
|
||
<a href="#name-pull-delivery" class="selfRef">Pull Delivery</a>
|
||
</figcaption></figure>
|
||
</div>
|
||
<p id="section-3.4.1.2-3">The polling interval <span class="bcp14">SHOULD NOT</span> exceed 10 seconds. For
|
||
Emergency overrides, agents relying on pull delivery <span class="bcp14">MUST</span>
|
||
poll at least every 5 seconds.<a href="#section-3.4.1.2-3" class="pilcrow">¶</a></p>
|
||
</section>
|
||
</div>
|
||
<div id="broadcast">
|
||
<section id="section-3.4.1.3">
|
||
<h5 id="name-broadcast">
|
||
<a href="#section-3.4.1.3" class="section-number selfRef">3.4.1.3. </a><a href="#name-broadcast" class="section-name selfRef">Broadcast</a>
|
||
</h5>
|
||
<p id="section-3.4.1.3-1">For domain-wide or group overrides, the dispatcher <span class="bcp14">MAY</span> use a
|
||
broadcast mechanism. The dispatcher fans out the override
|
||
signal to all matching agents and collects acknowledgments.<a href="#section-3.4.1.3-1" class="pilcrow">¶</a></p>
|
||
<span id="name-broadcast-delivery"></span><div id="fig-broadcast">
|
||
<figure id="figure-5">
|
||
<div class="alignLeft art-text artwork" id="section-3.4.1.3-2.1">
|
||
<pre>
|
||
POST /override/broadcast HTTP/1.1
|
||
Host: override-service.example.com
|
||
Content-Type: application/jose
|
||
|
||
<signed-override-signal with target_domain or target_group>
|
||
</pre>
|
||
</div>
|
||
<figcaption><a href="#figure-5" class="selfRef">Figure 5</a>:
|
||
<a href="#name-broadcast-delivery" class="selfRef">Broadcast Delivery</a>
|
||
</figcaption></figure>
|
||
</div>
|
||
</section>
|
||
</div>
|
||
</section>
|
||
</div>
|
||
</section>
|
||
</div>
|
||
<div id="override-endpoint-discovery">
|
||
<section id="section-3.5">
|
||
<h3 id="name-override-endpoint-discovery">
|
||
<a href="#section-3.5" class="section-number selfRef">3.5. </a><a href="#name-override-endpoint-discovery" class="section-name selfRef">Override Endpoint Discovery</a>
|
||
</h3>
|
||
<p id="section-3.5-1">Agents <span class="bcp14">MUST</span> advertise their override endpoint at the well-known
|
||
URI <code>/.well-known/agent-override</code> per <span>[<a href="#RFC9110" class="cite xref">RFC9110</a>]</span>.<a href="#section-3.5-1" class="pilcrow">¶</a></p>
|
||
<p id="section-3.5-2">A GET request to <code>/.well-known/agent-override</code> <span class="bcp14">MUST</span> return the
|
||
agent's override capabilities:<a href="#section-3.5-2" class="pilcrow">¶</a></p>
|
||
<span id="name-override-capability-adverti"></span><div id="fig-discovery">
|
||
<figure id="figure-6">
|
||
<div class="lang-json sourcecode" id="section-3.5-3.1">
|
||
<pre>
|
||
{
|
||
"agent_id": "spiffe://example.com/agent/firewall-mgr",
|
||
"supported_levels": [1, 2, 3],
|
||
"delivery_mechanisms": ["push", "pull"],
|
||
"max_response_time_ms": 1000,
|
||
"status_endpoint": "/.well-known/agent-override/status",
|
||
"protocol_version": "1.0"
|
||
}
|
||
</pre>
|
||
</div>
|
||
<figcaption><a href="#figure-6" class="selfRef">Figure 6</a>:
|
||
<a href="#name-override-capability-adverti" class="selfRef">Override Capability Advertisement</a>
|
||
</figcaption></figure>
|
||
</div>
|
||
</section>
|
||
</div>
|
||
</section>
|
||
</div>
|
||
<div id="compliance-and-verification">
|
||
<section id="section-4">
|
||
<h2 id="name-compliance-and-verification">
|
||
<a href="#section-4" class="section-number selfRef">4. </a><a href="#name-compliance-and-verification" class="section-name selfRef">Compliance and Verification</a>
|
||
</h2>
|
||
<div id="acknowledgment-protocol">
|
||
<section id="section-4.1">
|
||
<h3 id="name-acknowledgment-protocol">
|
||
<a href="#section-4.1" class="section-number selfRef">4.1. </a><a href="#name-acknowledgment-protocol" class="section-name selfRef">Acknowledgment Protocol</a>
|
||
</h3>
|
||
<div id="override-receipt-acknowledgment">
|
||
<section id="section-4.1.1">
|
||
<h4 id="name-override-receipt-acknowledg">
|
||
<a href="#section-4.1.1" class="section-number selfRef">4.1.1. </a><a href="#name-override-receipt-acknowledg" class="section-name selfRef">Override Receipt Acknowledgment</a>
|
||
</h4>
|
||
<p id="section-4.1.1-1">Upon receiving an override signal, the agent <span class="bcp14">MUST</span> respond with an
|
||
acknowledgment within the following timeframes:<a href="#section-4.1.1-1" class="pilcrow">¶</a></p>
|
||
<ul class="normal">
|
||
<li class="normal" id="section-4.1.1-2.1">
|
||
<p id="section-4.1.1-2.1.1">Level 1 (Advisory): 5 seconds<a href="#section-4.1.1-2.1.1" class="pilcrow">¶</a></p>
|
||
</li>
|
||
<li class="normal" id="section-4.1.1-2.2">
|
||
<p id="section-4.1.1-2.2.1">Level 2 (Mandatory): 2 seconds<a href="#section-4.1.1-2.2.1" class="pilcrow">¶</a></p>
|
||
</li>
|
||
<li class="normal" id="section-4.1.1-2.3">
|
||
<p id="section-4.1.1-2.3.1">Level 3 (Emergency): 1 second<a href="#section-4.1.1-2.3.1" class="pilcrow">¶</a></p>
|
||
</li>
|
||
</ul>
|
||
<p id="section-4.1.1-3">The acknowledgment is an ECT with <code>exec_act</code> set to the
|
||
appropriate override acknowledgment value:<a href="#section-4.1.1-3" class="pilcrow">¶</a></p>
|
||
<span id="name-override-receipt-acknowledgm"></span><div id="fig-ack">
|
||
<figure id="figure-7">
|
||
<div class="lang-json sourcecode" id="section-4.1.1-4.1">
|
||
<pre>
|
||
{
|
||
"exec_act": "override_ack",
|
||
"par": ["<override-signal-jti>"],
|
||
"ext": {
|
||
"override.status": "received",
|
||
"override.level": 3,
|
||
"override.prior_state": "autonomous",
|
||
"override.effective_at": "2026-03-06T12:00:00.123Z"
|
||
}
|
||
}
|
||
</pre>
|
||
</div>
|
||
<figcaption><a href="#figure-7" class="selfRef">Figure 7</a>:
|
||
<a href="#name-override-receipt-acknowledgm" class="selfRef">Override Receipt Acknowledgment ECT</a>
|
||
</figcaption></figure>
|
||
</div>
|
||
</section>
|
||
</div>
|
||
<div id="compliance-confirmation">
|
||
<section id="section-4.1.2">
|
||
<h4 id="name-compliance-confirmation">
|
||
<a href="#section-4.1.2" class="section-number selfRef">4.1.2. </a><a href="#name-compliance-confirmation" class="section-name selfRef">Compliance Confirmation</a>
|
||
</h4>
|
||
<p id="section-4.1.2-1">After the agent has changed its behavior in response to the
|
||
override, it <span class="bcp14">MUST</span> emit a compliance confirmation ECT:<a href="#section-4.1.2-1" class="pilcrow">¶</a></p>
|
||
<span id="name-compliance-confirmation-ect"></span><div id="fig-compliance">
|
||
<figure id="figure-8">
|
||
<div class="lang-json sourcecode" id="section-4.1.2-2.1">
|
||
<pre>
|
||
{
|
||
"exec_act": "override_complied",
|
||
"par": ["<ack-ect-jti>"],
|
||
"ext": {
|
||
"override.status": "complied",
|
||
"override.current_state": "stopped",
|
||
"override.actions_terminated": 3,
|
||
"override.evidence": "All autonomous tasks halted"
|
||
}
|
||
}
|
||
</pre>
|
||
</div>
|
||
<figcaption><a href="#figure-8" class="selfRef">Figure 8</a>:
|
||
<a href="#name-compliance-confirmation-ect" class="selfRef">Compliance Confirmation ECT</a>
|
||
</figcaption></figure>
|
||
</div>
|
||
</section>
|
||
</div>
|
||
<div id="non-compliance-reporting-and-escalation">
|
||
<section id="section-4.1.3">
|
||
<h4 id="name-non-compliance-reporting-an">
|
||
<a href="#section-4.1.3" class="section-number selfRef">4.1.3. </a><a href="#name-non-compliance-reporting-an" class="section-name selfRef">Non-Compliance Reporting and Escalation</a>
|
||
</h4>
|
||
<p id="section-4.1.3-1">For Level 1 (Advisory) overrides, the agent <span class="bcp14">MAY</span> decline to
|
||
comply. In this case, the agent <span class="bcp14">MUST</span> emit a non-compliance ECT:<a href="#section-4.1.3-1" class="pilcrow">¶</a></p>
|
||
<span id="name-non-compliance-ect-advisory"></span><div id="fig-noncompliance">
|
||
<figure id="figure-9">
|
||
<div class="lang-json sourcecode" id="section-4.1.3-2.1">
|
||
<pre>
|
||
{
|
||
"exec_act": "override_declined",
|
||
"par": ["<override-signal-jti>"],
|
||
"ext": {
|
||
"override.status": "declined",
|
||
"override.reason": "Action is within policy bounds",
|
||
"override.level": 1
|
||
}
|
||
}
|
||
</pre>
|
||
</div>
|
||
<figcaption><a href="#figure-9" class="selfRef">Figure 9</a>:
|
||
<a href="#name-non-compliance-ect-advisory" class="selfRef">Non-Compliance ECT (Advisory Only)</a>
|
||
</figcaption></figure>
|
||
</div>
|
||
<p id="section-4.1.3-3">For Level 2 and Level 3 overrides, the agent <span class="bcp14">MUST NOT</span> decline.
|
||
If the agent cannot fully comply (e.g., due to hardware
|
||
limitations), it <span class="bcp14">MUST</span> report partial compliance with a
|
||
description of what could not be done. The override dispatcher
|
||
<span class="bcp14">MUST</span> escalate partial compliance to the operator.<a href="#section-4.1.3-3" class="pilcrow">¶</a></p>
|
||
</section>
|
||
</div>
|
||
</section>
|
||
</div>
|
||
<div id="compliance-verification">
|
||
<section id="section-4.2">
|
||
<h3 id="name-compliance-verification">
|
||
<a href="#section-4.2" class="section-number selfRef">4.2. </a><a href="#name-compliance-verification" class="section-name selfRef">Compliance Verification</a>
|
||
</h3>
|
||
<div id="behavioral-verification-post-override">
|
||
<section id="section-4.2.1">
|
||
<h4 id="name-behavioral-verification-pos">
|
||
<a href="#section-4.2.1" class="section-number selfRef">4.2.1. </a><a href="#name-behavioral-verification-pos" class="section-name selfRef">Behavioral Verification Post-Override</a>
|
||
</h4>
|
||
<p id="section-4.2.1-1">After an agent acknowledges an override, the compliance
|
||
verification system <span class="bcp14">SHOULD</span> monitor the agent's subsequent
|
||
behavior to confirm the override was actually applied.
|
||
Verification methods include:<a href="#section-4.2.1-1" class="pilcrow">¶</a></p>
|
||
<ul class="normal">
|
||
<li class="normal" id="section-4.2.1-2.1">
|
||
<p id="section-4.2.1-2.1.1">Observing that the agent's ECT emissions cease (for Level 3)<a href="#section-4.2.1-2.1.1" class="pilcrow">¶</a></p>
|
||
</li>
|
||
<li class="normal" id="section-4.2.1-2.2">
|
||
<p id="section-4.2.1-2.2.1">Checking that subsequent ECTs contain only permitted actions
|
||
(for Level 2 with restrictions)<a href="#section-4.2.1-2.2.1" class="pilcrow">¶</a></p>
|
||
</li>
|
||
<li class="normal" id="section-4.2.1-2.3">
|
||
<p id="section-4.2.1-2.3.1">Querying the agent's status endpoint<a href="#section-4.2.1-2.3.1" class="pilcrow">¶</a></p>
|
||
</li>
|
||
</ul>
|
||
</section>
|
||
</div>
|
||
<div id="timeout-and-retry-semantics">
|
||
<section id="section-4.2.2">
|
||
<h4 id="name-timeout-and-retry-semantics">
|
||
<a href="#section-4.2.2" class="section-number selfRef">4.2.2. </a><a href="#name-timeout-and-retry-semantics" class="section-name selfRef">Timeout and Retry Semantics</a>
|
||
</h4>
|
||
<p id="section-4.2.2-1">If the agent does not acknowledge within the required timeframe:<a href="#section-4.2.2-1" class="pilcrow">¶</a></p>
|
||
<ol start="1" type="1" class="normal type-1" id="section-4.2.2-2">
|
||
<li id="section-4.2.2-2.1">
|
||
<p id="section-4.2.2-2.1.1">The dispatcher <span class="bcp14">MUST</span> retry the override signal once after 2
|
||
seconds.<a href="#section-4.2.2-2.1.1" class="pilcrow">¶</a></p>
|
||
</li>
|
||
<li id="section-4.2.2-2.2">
|
||
<p id="section-4.2.2-2.2.1">If no acknowledgment is received after the retry, the
|
||
dispatcher <span class="bcp14">MUST</span> escalate to the operator.<a href="#section-4.2.2-2.2.1" class="pilcrow">¶</a></p>
|
||
</li>
|
||
<li id="section-4.2.2-2.3">
|
||
<p id="section-4.2.2-2.3.1">For Level 3 (Emergency) overrides, the dispatcher <span class="bcp14">SHOULD</span>
|
||
attempt alternative delivery mechanisms (e.g., switching from
|
||
push to broadcast).<a href="#section-4.2.2-2.3.1" class="pilcrow">¶</a></p>
|
||
</li>
|
||
<li id="section-4.2.2-2.4">
|
||
<p id="section-4.2.2-2.4.1">If all delivery attempts fail, the graceful degradation
|
||
policy applies (see <a href="#graceful-degradation" class="auto internal xref">Section 4.3</a>).<a href="#section-4.2.2-2.4.1" class="pilcrow">¶</a></p>
|
||
</li>
|
||
</ol>
|
||
</section>
|
||
</div>
|
||
</section>
|
||
</div>
|
||
<div id="graceful-degradation">
|
||
<section id="section-4.3">
|
||
<h3 id="name-graceful-degradation">
|
||
<a href="#section-4.3" class="section-number selfRef">4.3. </a><a href="#name-graceful-degradation" class="section-name selfRef">Graceful Degradation</a>
|
||
</h3>
|
||
<div id="unreachable-override-target">
|
||
<section id="section-4.3.1">
|
||
<h4 id="name-unreachable-override-target">
|
||
<a href="#section-4.3.1" class="section-number selfRef">4.3.1. </a><a href="#name-unreachable-override-target" class="section-name selfRef">Unreachable Override Target</a>
|
||
</h4>
|
||
<p id="section-4.3.1-1">When the override target agent is unreachable, the system <span class="bcp14">MUST</span>:<a href="#section-4.3.1-1" class="pilcrow">¶</a></p>
|
||
<ol start="1" type="1" class="normal type-1" id="section-4.3.1-2">
|
||
<li id="section-4.3.1-2.1">
|
||
<p id="section-4.3.1-2.1.1">Log an ECT with <code>exec_act</code>: <code>"override_delivery_failed"</code>
|
||
documenting the failure.<a href="#section-4.3.1-2.1.1" class="pilcrow">¶</a></p>
|
||
</li>
|
||
<li id="section-4.3.1-2.2">
|
||
<p id="section-4.3.1-2.2.1">Notify the operator of the delivery failure.<a href="#section-4.3.1-2.2.1" class="pilcrow">¶</a></p>
|
||
</li>
|
||
<li id="section-4.3.1-2.3">
|
||
<p id="section-4.3.1-2.3.1">Attempt delivery via alternative mechanisms.<a href="#section-4.3.1-2.3.1" class="pilcrow">¶</a></p>
|
||
</li>
|
||
</ol>
|
||
</section>
|
||
</div>
|
||
<div id="failsafe-defaults">
|
||
<section id="section-4.3.2">
|
||
<h4 id="name-failsafe-defaults">
|
||
<a href="#section-4.3.2" class="section-number selfRef">4.3.2. </a><a href="#name-failsafe-defaults" class="section-name selfRef">Failsafe Defaults</a>
|
||
</h4>
|
||
<p id="section-4.3.2-1">Agents <span class="bcp14">MUST</span> implement a dead man's switch: if the agent loses
|
||
contact with the override service for a configurable duration
|
||
(default: 90 seconds), the agent <span class="bcp14">MUST</span> enter a failsafe state
|
||
equivalent to Level 2 (Mandatory) with restricted operations.<a href="#section-4.3.2-1" class="pilcrow">¶</a></p>
|
||
<p id="section-4.3.2-2">The failsafe policy is configured in the agent's ACP-DAG-HITL
|
||
policy and <span class="bcp14">MUST</span> specify one of:<a href="#section-4.3.2-2" class="pilcrow">¶</a></p>
|
||
<ul class="normal">
|
||
<li class="normal" id="section-4.3.2-3.1">
|
||
<p id="section-4.3.2-3.1.1"><code>safe_pause</code>: Enter Level 2 with read-only operations permitted.<a href="#section-4.3.2-3.1.1" class="pilcrow">¶</a></p>
|
||
</li>
|
||
<li class="normal" id="section-4.3.2-3.2">
|
||
<p id="section-4.3.2-3.2.1"><code>full_stop</code>: Enter Level 3 equivalent (cease all actions).<a href="#section-4.3.2-3.2.1" class="pilcrow">¶</a></p>
|
||
</li>
|
||
<li class="normal" id="section-4.3.2-3.3">
|
||
<p id="section-4.3.2-3.3.1"><code>continue_logged</code>: Continue operating but emit warning ECTs at
|
||
elevated frequency. This option is only permitted at HITL
|
||
intensity I0 or I1.<a href="#section-4.3.2-3.3.1" class="pilcrow">¶</a></p>
|
||
</li>
|
||
</ul>
|
||
</section>
|
||
</div>
|
||
<div id="proxy-override-for-offline-agents">
|
||
<section id="section-4.3.3">
|
||
<h4 id="name-proxy-override-for-offline-">
|
||
<a href="#section-4.3.3" class="section-number selfRef">4.3.3. </a><a href="#name-proxy-override-for-offline-" class="section-name selfRef">Proxy Override for Offline Agents</a>
|
||
</h4>
|
||
<p id="section-4.3.3-1">When an agent is offline, the override dispatcher <span class="bcp14">MAY</span> apply the
|
||
override to the agent's proxy or orchestrator. The proxy <span class="bcp14">MUST</span>:<a href="#section-4.3.3-1" class="pilcrow">¶</a></p>
|
||
<ol start="1" type="1" class="normal type-1" id="section-4.3.3-2">
|
||
<li id="section-4.3.3-2.1">
|
||
<p id="section-4.3.3-2.1.1">Queue the override signal for delivery when the agent
|
||
reconnects.<a href="#section-4.3.3-2.1.1" class="pilcrow">¶</a></p>
|
||
</li>
|
||
<li id="section-4.3.3-2.2">
|
||
<p id="section-4.3.3-2.2.1">Prevent new tasks from being dispatched to the offline agent.<a href="#section-4.3.3-2.2.1" class="pilcrow">¶</a></p>
|
||
</li>
|
||
<li id="section-4.3.3-2.3">
|
||
<p id="section-4.3.3-2.3.1">Emit an ECT recording the proxy override action.<a href="#section-4.3.3-2.3.1" class="pilcrow">¶</a></p>
|
||
</li>
|
||
</ol>
|
||
<p id="section-4.3.3-3">When the agent reconnects, the proxy <span class="bcp14">MUST</span> deliver the queued
|
||
override signal. The agent <span class="bcp14">MUST</span> process it as if it were
|
||
received in real time, applying the override level and action
|
||
specified.<a href="#section-4.3.3-3" class="pilcrow">¶</a></p>
|
||
</section>
|
||
</div>
|
||
</section>
|
||
</div>
|
||
</section>
|
||
</div>
|
||
<div id="integration-with-acp-dag-hitl-and-ect">
|
||
<section id="section-5">
|
||
<h2 id="name-integration-with-acp-dag-hi">
|
||
<a href="#section-5" class="section-number selfRef">5. </a><a href="#name-integration-with-acp-dag-hi" class="section-name selfRef">Integration with ACP-DAG-HITL and ECT</a>
|
||
</h2>
|
||
<div id="override-authorization-via-acp-policy">
|
||
<section id="section-5.1">
|
||
<h3 id="name-override-authorization-via-">
|
||
<a href="#section-5.1" class="section-number selfRef">5.1. </a><a href="#name-override-authorization-via-" class="section-name selfRef">Override Authorization via ACP Policy</a>
|
||
</h3>
|
||
<p id="section-5.1-1">Override authority is governed by ACP-DAG-HITL policy tokens
|
||
<span>[<a href="#I-D.nennemann-agent-dag-hitl-safety" class="cite xref">I-D.nennemann-agent-dag-hitl-safety</a>]</span>. The policy token
|
||
specifies:<a href="#section-5.1-1" class="pilcrow">¶</a></p>
|
||
<ul class="normal">
|
||
<li class="normal" id="section-5.1-2.1">
|
||
<p id="section-5.1-2.1.1">Which operator roles are authorized for each override level.<a href="#section-5.1-2.1.1" class="pilcrow">¶</a></p>
|
||
</li>
|
||
<li class="normal" id="section-5.1-2.2">
|
||
<p id="section-5.1-2.2.1">Which agents or agent groups each role may override.<a href="#section-5.1-2.2.1" class="pilcrow">¶</a></p>
|
||
</li>
|
||
<li class="normal" id="section-5.1-2.3">
|
||
<p id="section-5.1-2.3.1">Escalation chains when primary operators are unavailable.<a href="#section-5.1-2.3.1" class="pilcrow">¶</a></p>
|
||
</li>
|
||
</ul>
|
||
<p id="section-5.1-3">The override dispatcher <span class="bcp14">MUST</span> verify the operator's JWT against
|
||
the ACP policy before routing the override signal. An override
|
||
signal from an unauthorized operator <span class="bcp14">MUST</span> be rejected with HTTP
|
||
403 and logged as a security event.<a href="#section-5.1-3" class="pilcrow">¶</a></p>
|
||
</section>
|
||
</div>
|
||
<div id="override-events-as-ect-nodes">
|
||
<section id="section-5.2">
|
||
<h3 id="name-override-events-as-ect-node">
|
||
<a href="#section-5.2" class="section-number selfRef">5.2. </a><a href="#name-override-events-as-ect-node" class="section-name selfRef">Override Events as ECT Nodes</a>
|
||
</h3>
|
||
<p id="section-5.2-1">Every override interaction produces ECT nodes
|
||
<span>[<a href="#I-D.nennemann-wimse-ect" class="cite xref">I-D.nennemann-wimse-ect</a>]</span> that are linked into the workflow
|
||
DAG:<a href="#section-5.2-1" class="pilcrow">¶</a></p>
|
||
<span id="name-override-ect-exec_act-value"></span><div id="fig-ect-actions">
|
||
<table class="center" id="table-1">
|
||
<caption>
|
||
<a href="#table-1" class="selfRef">Table 1</a>:
|
||
<a href="#name-override-ect-exec_act-value" class="selfRef">Override ECT exec_act Values</a>
|
||
</caption>
|
||
<thead>
|
||
<tr>
|
||
<th class="text-left" rowspan="1" colspan="1">Event</th>
|
||
<th class="text-left" rowspan="1" colspan="1">exec_act value</th>
|
||
</tr>
|
||
</thead>
|
||
<tbody>
|
||
<tr>
|
||
<td class="text-left" rowspan="1" colspan="1">Advisory override issued</td>
|
||
<td class="text-left" rowspan="1" colspan="1">
|
||
<code>override_advisory</code>
|
||
</td>
|
||
</tr>
|
||
<tr>
|
||
<td class="text-left" rowspan="1" colspan="1">Mandatory override issued</td>
|
||
<td class="text-left" rowspan="1" colspan="1">
|
||
<code>override_mandatory</code>
|
||
</td>
|
||
</tr>
|
||
<tr>
|
||
<td class="text-left" rowspan="1" colspan="1">Emergency override issued</td>
|
||
<td class="text-left" rowspan="1" colspan="1">
|
||
<code>override_emergency</code>
|
||
</td>
|
||
</tr>
|
||
<tr>
|
||
<td class="text-left" rowspan="1" colspan="1">Override acknowledged</td>
|
||
<td class="text-left" rowspan="1" colspan="1">
|
||
<code>override_ack</code>
|
||
</td>
|
||
</tr>
|
||
<tr>
|
||
<td class="text-left" rowspan="1" colspan="1">Override complied</td>
|
||
<td class="text-left" rowspan="1" colspan="1">
|
||
<code>override_complied</code>
|
||
</td>
|
||
</tr>
|
||
<tr>
|
||
<td class="text-left" rowspan="1" colspan="1">Override declined (Advisory only)</td>
|
||
<td class="text-left" rowspan="1" colspan="1">
|
||
<code>override_declined</code>
|
||
</td>
|
||
</tr>
|
||
<tr>
|
||
<td class="text-left" rowspan="1" colspan="1">Override delivery failed</td>
|
||
<td class="text-left" rowspan="1" colspan="1">
|
||
<code>override_delivery_failed</code>
|
||
</td>
|
||
</tr>
|
||
<tr>
|
||
<td class="text-left" rowspan="1" colspan="1">Override lifted</td>
|
||
<td class="text-left" rowspan="1" colspan="1">
|
||
<code>override_lifted</code>
|
||
</td>
|
||
</tr>
|
||
<tr>
|
||
<td class="text-left" rowspan="1" colspan="1">Override expired</td>
|
||
<td class="text-left" rowspan="1" colspan="1">
|
||
<code>override_expired</code>
|
||
</td>
|
||
</tr>
|
||
</tbody>
|
||
</table>
|
||
</div>
|
||
<p id="section-5.2-3">Each override ECT references the triggering override signal's
|
||
<code>jti</code> via the <code>par</code> claim, maintaining the causal chain in the
|
||
DAG.<a href="#section-5.2-3" class="pilcrow">¶</a></p>
|
||
</section>
|
||
</div>
|
||
<div id="override-audit-trail">
|
||
<section id="section-5.3">
|
||
<h3 id="name-override-audit-trail">
|
||
<a href="#section-5.3" class="section-number selfRef">5.3. </a><a href="#name-override-audit-trail" class="section-name selfRef">Override Audit Trail</a>
|
||
</h3>
|
||
<p id="section-5.3-1">The sequence of override ECTs provides a complete,
|
||
tamper-evident audit trail:<a href="#section-5.3-1" class="pilcrow">¶</a></p>
|
||
<ol start="1" type="1" class="normal type-1" id="section-5.3-2">
|
||
<li id="section-5.3-2.1">
|
||
<p id="section-5.3-2.1.1">The operator issues an override (override ECT with operator
|
||
identity, reason, and level).<a href="#section-5.3-2.1.1" class="pilcrow">¶</a></p>
|
||
</li>
|
||
<li id="section-5.3-2.2">
|
||
<p id="section-5.3-2.2.1">The agent acknowledges (ack ECT linked to override ECT).<a href="#section-5.3-2.2.1" class="pilcrow">¶</a></p>
|
||
</li>
|
||
<li id="section-5.3-2.3">
|
||
<p id="section-5.3-2.3.1">The agent confirms compliance (compliance ECT linked to ack
|
||
ECT).<a href="#section-5.3-2.3.1" class="pilcrow">¶</a></p>
|
||
</li>
|
||
<li id="section-5.3-2.4">
|
||
<p id="section-5.3-2.4.1">Optionally, the operator lifts the override (lift ECT linked
|
||
to override ECT).<a href="#section-5.3-2.4.1" class="pilcrow">¶</a></p>
|
||
</li>
|
||
</ol>
|
||
<p id="section-5.3-3">At AEM assurance level L3, all override ECTs <span class="bcp14">MUST</span> be committed
|
||
to the immutable audit ledger.<a href="#section-5.3-3" class="pilcrow">¶</a></p>
|
||
</section>
|
||
</div>
|
||
</section>
|
||
</div>
|
||
<div id="security-considerations">
|
||
<section id="section-6">
|
||
<h2 id="name-security-considerations">
|
||
<a href="#section-6" class="section-number selfRef">6. </a><a href="#name-security-considerations" class="section-name selfRef">Security Considerations</a>
|
||
</h2>
|
||
<div id="unauthorized-override-attempts">
|
||
<section id="section-6.1">
|
||
<h3 id="name-unauthorized-override-attem">
|
||
<a href="#section-6.1" class="section-number selfRef">6.1. </a><a href="#name-unauthorized-override-attem" class="section-name selfRef">Unauthorized Override Attempts</a>
|
||
</h3>
|
||
<p id="section-6.1-1">Override signals that fail authentication or authorization <span class="bcp14">MUST</span>
|
||
be rejected. The agent <span class="bcp14">MUST NOT</span> alter its behavior in response
|
||
to an unsigned or improperly signed override signal. All
|
||
rejected override attempts <span class="bcp14">MUST</span> be logged with the source
|
||
identity (if available) and the reason for rejection.<a href="#section-6.1-1" class="pilcrow">¶</a></p>
|
||
</section>
|
||
</div>
|
||
<div id="replay-protection-for-override-signals">
|
||
<section id="section-6.2">
|
||
<h3 id="name-replay-protection-for-overr">
|
||
<a href="#section-6.2" class="section-number selfRef">6.2. </a><a href="#name-replay-protection-for-overr" class="section-name selfRef">Replay Protection for Override Signals</a>
|
||
</h3>
|
||
<p id="section-6.2-1">Agents <span class="bcp14">MUST</span> reject override signals with:<a href="#section-6.2-1" class="pilcrow">¶</a></p>
|
||
<ul class="normal">
|
||
<li class="normal" id="section-6.2-2.1">
|
||
<p id="section-6.2-2.1.1">An <code>iat</code> claim more than 30 seconds in the past.<a href="#section-6.2-2.1.1" class="pilcrow">¶</a></p>
|
||
</li>
|
||
<li class="normal" id="section-6.2-2.2">
|
||
<p id="section-6.2-2.2.1">A <code>jti</code> that matches a previously processed override signal.<a href="#section-6.2-2.2.1" class="pilcrow">¶</a></p>
|
||
</li>
|
||
<li class="normal" id="section-6.2-2.3">
|
||
<p id="section-6.2-2.3.1">A missing or invalid <code>nonce</code> claim.<a href="#section-6.2-2.3.1" class="pilcrow">¶</a></p>
|
||
</li>
|
||
</ul>
|
||
<p id="section-6.2-3">Agents <span class="bcp14">MUST</span> maintain a cache of recently processed <code>jti</code> values
|
||
for at least 5 minutes to detect replays.<a href="#section-6.2-3" class="pilcrow">¶</a></p>
|
||
</section>
|
||
</div>
|
||
<div id="override-signal-tampering">
|
||
<section id="section-6.3">
|
||
<h3 id="name-override-signal-tampering">
|
||
<a href="#section-6.3" class="section-number selfRef">6.3. </a><a href="#name-override-signal-tampering" class="section-name selfRef">Override Signal Tampering</a>
|
||
</h3>
|
||
<p id="section-6.3-1">Override signals are signed JWTs. Agents <span class="bcp14">MUST</span> verify the
|
||
signature against the operator's public key (as registered in
|
||
ACP-DAG-HITL policy) before processing. Agents <span class="bcp14">MUST</span> reject
|
||
signals with invalid or expired signatures.<a href="#section-6.3-1" class="pilcrow">¶</a></p>
|
||
</section>
|
||
</div>
|
||
<div id="denial-of-service-via-override-flooding">
|
||
<section id="section-6.4">
|
||
<h3 id="name-denial-of-service-via-overr">
|
||
<a href="#section-6.4" class="section-number selfRef">6.4. </a><a href="#name-denial-of-service-via-overr" class="section-name selfRef">Denial-of-Service via Override Flooding</a>
|
||
</h3>
|
||
<p id="section-6.4-1">To prevent abuse, agents <span class="bcp14">SHOULD</span> implement rate limiting on the
|
||
override endpoint:<a href="#section-6.4-1" class="pilcrow">¶</a></p>
|
||
<ul class="normal">
|
||
<li class="normal" id="section-6.4-2.1">
|
||
<p id="section-6.4-2.1.1">Level 1 (Advisory): Maximum 10 signals per minute per operator.<a href="#section-6.4-2.1.1" class="pilcrow">¶</a></p>
|
||
</li>
|
||
<li class="normal" id="section-6.4-2.2">
|
||
<p id="section-6.4-2.2.1">Level 2 (Mandatory): Maximum 5 signals per minute per operator.<a href="#section-6.4-2.2.1" class="pilcrow">¶</a></p>
|
||
</li>
|
||
<li class="normal" id="section-6.4-2.3">
|
||
<p id="section-6.4-2.3.1">Level 3 (Emergency): No rate limit (to ensure emergency
|
||
overrides are never blocked), but agents <span class="bcp14">MUST</span> log high-frequency
|
||
Emergency overrides as potential abuse.<a href="#section-6.4-2.3.1" class="pilcrow">¶</a></p>
|
||
</li>
|
||
</ul>
|
||
<p id="section-6.4-3">The override endpoint <span class="bcp14">SHOULD</span> be served on a separate port or
|
||
network interface from the agent's main API to ensure
|
||
availability during overload conditions.<a href="#section-6.4-3" class="pilcrow">¶</a></p>
|
||
</section>
|
||
</div>
|
||
<div id="authority-impersonation">
|
||
<section id="section-6.5">
|
||
<h3 id="name-authority-impersonation">
|
||
<a href="#section-6.5" class="section-number selfRef">6.5. </a><a href="#name-authority-impersonation" class="section-name selfRef">Authority Impersonation</a>
|
||
</h3>
|
||
<p id="section-6.5-1">Agents <span class="bcp14">MUST</span> verify override authority by:<a href="#section-6.5-1" class="pilcrow">¶</a></p>
|
||
<ol start="1" type="1" class="normal type-1" id="section-6.5-2">
|
||
<li id="section-6.5-2.1">
|
||
<p id="section-6.5-2.1.1">Validating the operator JWT signature against trusted keys.<a href="#section-6.5-2.1.1" class="pilcrow">¶</a></p>
|
||
</li>
|
||
<li id="section-6.5-2.2">
|
||
<p id="section-6.5-2.2.1">Confirming the operator's role matches the required role for
|
||
the override level.<a href="#section-6.5-2.2.1" class="pilcrow">¶</a></p>
|
||
</li>
|
||
<li id="section-6.5-2.3">
|
||
<p id="section-6.5-2.3.1">Verifying the operator is authorized to override the
|
||
specific target agent(s) per ACP policy.<a href="#section-6.5-2.3.1" class="pilcrow">¶</a></p>
|
||
</li>
|
||
</ol>
|
||
<p id="section-6.5-3">Deployments <span class="bcp14">SHOULD</span> implement multi-operator approval for Level 3
|
||
(Emergency) overrides affecting domain-wide scope, requiring two
|
||
independent operator JWTs.<a href="#section-6.5-3" class="pilcrow">¶</a></p>
|
||
</section>
|
||
</div>
|
||
</section>
|
||
</div>
|
||
<div id="iana-considerations">
|
||
<section id="section-7">
|
||
<h2 id="name-iana-considerations">
|
||
<a href="#section-7" class="section-number selfRef">7. </a><a href="#name-iana-considerations" class="section-name selfRef">IANA Considerations</a>
|
||
</h2>
|
||
<div id="well-known-uri-registration">
|
||
<section id="section-7.1">
|
||
<h3 id="name-well-known-uri-registration">
|
||
<a href="#section-7.1" class="section-number selfRef">7.1. </a><a href="#name-well-known-uri-registration" class="section-name selfRef">Well-Known URI Registration</a>
|
||
</h3>
|
||
<p id="section-7.1-1">This document requests registration of the following well-known
|
||
URI suffix per <span>[<a href="#RFC9110" class="cite xref">RFC9110</a>]</span>:<a href="#section-7.1-1" class="pilcrow">¶</a></p>
|
||
<span id="name-well-known-uri-registration-2"></span><div id="fig-wellknown">
|
||
<table class="center" id="table-2">
|
||
<caption>
|
||
<a href="#table-2" class="selfRef">Table 2</a>:
|
||
<a href="#name-well-known-uri-registration-2" class="selfRef">Well-Known URI Registration</a>
|
||
</caption>
|
||
<thead>
|
||
<tr>
|
||
<th class="text-left" rowspan="1" colspan="1">URI Suffix</th>
|
||
<th class="text-left" rowspan="1" colspan="1">Description</th>
|
||
</tr>
|
||
</thead>
|
||
<tbody>
|
||
<tr>
|
||
<td class="text-left" rowspan="1" colspan="1">
|
||
<code>agent-override</code>
|
||
</td>
|
||
<td class="text-left" rowspan="1" colspan="1">Agent override endpoint for receiving override signals, querying capabilities, and reporting status</td>
|
||
</tr>
|
||
</tbody>
|
||
</table>
|
||
</div>
|
||
</section>
|
||
</div>
|
||
<div id="override-execact-values">
|
||
<section id="section-7.2">
|
||
<h3 id="name-override-exec_act-values">
|
||
<a href="#section-7.2" class="section-number selfRef">7.2. </a><a href="#name-override-exec_act-values" class="section-name selfRef">Override exec_act Values</a>
|
||
</h3>
|
||
<p id="section-7.2-1">This document requests registration of the following <code>exec_act</code>
|
||
values in the ECT Action Type Registry:<a href="#section-7.2-1" class="pilcrow">¶</a></p>
|
||
<span id="name-override-exec_act-value-reg"></span><div id="fig-iana-actions">
|
||
<table class="center" id="table-3">
|
||
<caption>
|
||
<a href="#table-3" class="selfRef">Table 3</a>:
|
||
<a href="#name-override-exec_act-value-reg" class="selfRef">Override exec_act Value Registrations</a>
|
||
</caption>
|
||
<thead>
|
||
<tr>
|
||
<th class="text-left" rowspan="1" colspan="1">Value</th>
|
||
<th class="text-left" rowspan="1" colspan="1">Description</th>
|
||
<th class="text-left" rowspan="1" colspan="1">Reference</th>
|
||
</tr>
|
||
</thead>
|
||
<tbody>
|
||
<tr>
|
||
<td class="text-left" rowspan="1" colspan="1">
|
||
<code>override_advisory</code>
|
||
</td>
|
||
<td class="text-left" rowspan="1" colspan="1">Advisory override signal issued</td>
|
||
<td class="text-left" rowspan="1" colspan="1">This document</td>
|
||
</tr>
|
||
<tr>
|
||
<td class="text-left" rowspan="1" colspan="1">
|
||
<code>override_mandatory</code>
|
||
</td>
|
||
<td class="text-left" rowspan="1" colspan="1">Mandatory override signal issued</td>
|
||
<td class="text-left" rowspan="1" colspan="1">This document</td>
|
||
</tr>
|
||
<tr>
|
||
<td class="text-left" rowspan="1" colspan="1">
|
||
<code>override_emergency</code>
|
||
</td>
|
||
<td class="text-left" rowspan="1" colspan="1">Emergency override signal issued</td>
|
||
<td class="text-left" rowspan="1" colspan="1">This document</td>
|
||
</tr>
|
||
<tr>
|
||
<td class="text-left" rowspan="1" colspan="1">
|
||
<code>override_ack</code>
|
||
</td>
|
||
<td class="text-left" rowspan="1" colspan="1">Agent acknowledgment of override</td>
|
||
<td class="text-left" rowspan="1" colspan="1">This document</td>
|
||
</tr>
|
||
<tr>
|
||
<td class="text-left" rowspan="1" colspan="1">
|
||
<code>override_complied</code>
|
||
</td>
|
||
<td class="text-left" rowspan="1" colspan="1">Agent confirmed compliance</td>
|
||
<td class="text-left" rowspan="1" colspan="1">This document</td>
|
||
</tr>
|
||
<tr>
|
||
<td class="text-left" rowspan="1" colspan="1">
|
||
<code>override_declined</code>
|
||
</td>
|
||
<td class="text-left" rowspan="1" colspan="1">Agent declined advisory override</td>
|
||
<td class="text-left" rowspan="1" colspan="1">This document</td>
|
||
</tr>
|
||
<tr>
|
||
<td class="text-left" rowspan="1" colspan="1">
|
||
<code>override_delivery_failed</code>
|
||
</td>
|
||
<td class="text-left" rowspan="1" colspan="1">Override delivery failure</td>
|
||
<td class="text-left" rowspan="1" colspan="1">This document</td>
|
||
</tr>
|
||
<tr>
|
||
<td class="text-left" rowspan="1" colspan="1">
|
||
<code>override_lifted</code>
|
||
</td>
|
||
<td class="text-left" rowspan="1" colspan="1">Override explicitly lifted</td>
|
||
<td class="text-left" rowspan="1" colspan="1">This document</td>
|
||
</tr>
|
||
<tr>
|
||
<td class="text-left" rowspan="1" colspan="1">
|
||
<code>override_expired</code>
|
||
</td>
|
||
<td class="text-left" rowspan="1" colspan="1">Override expired by TTL</td>
|
||
<td class="text-left" rowspan="1" colspan="1">This document</td>
|
||
</tr>
|
||
</tbody>
|
||
</table>
|
||
</div>
|
||
</section>
|
||
</div>
|
||
<div id="override-jwt-claims">
|
||
<section id="section-7.3">
|
||
<h3 id="name-override-jwt-claims">
|
||
<a href="#section-7.3" class="section-number selfRef">7.3. </a><a href="#name-override-jwt-claims" class="section-name selfRef">Override JWT Claims</a>
|
||
</h3>
|
||
<p id="section-7.3-1">This document requests registration of the following JWT claims
|
||
in the IANA JSON Web Token Claims registry:<a href="#section-7.3-1" class="pilcrow">¶</a></p>
|
||
<span id="name-override-jwt-claim-registra"></span><div id="fig-iana-claims">
|
||
<table class="center" id="table-4">
|
||
<caption>
|
||
<a href="#table-4" class="selfRef">Table 4</a>:
|
||
<a href="#name-override-jwt-claim-registra" class="selfRef">Override JWT Claim Registrations</a>
|
||
</caption>
|
||
<thead>
|
||
<tr>
|
||
<th class="text-left" rowspan="1" colspan="1">Claim Name</th>
|
||
<th class="text-left" rowspan="1" colspan="1">Description</th>
|
||
<th class="text-left" rowspan="1" colspan="1">Reference</th>
|
||
</tr>
|
||
</thead>
|
||
<tbody>
|
||
<tr>
|
||
<td class="text-left" rowspan="1" colspan="1">
|
||
<code>override_level</code>
|
||
</td>
|
||
<td class="text-left" rowspan="1" colspan="1">Override authority level (1-3)</td>
|
||
<td class="text-left" rowspan="1" colspan="1">This document</td>
|
||
</tr>
|
||
<tr>
|
||
<td class="text-left" rowspan="1" colspan="1">
|
||
<code>override_scope</code>
|
||
</td>
|
||
<td class="text-left" rowspan="1" colspan="1">Target scope of the override</td>
|
||
<td class="text-left" rowspan="1" colspan="1">This document</td>
|
||
</tr>
|
||
<tr>
|
||
<td class="text-left" rowspan="1" colspan="1">
|
||
<code>override_action</code>
|
||
</td>
|
||
<td class="text-left" rowspan="1" colspan="1">Directed action for the agent</td>
|
||
<td class="text-left" rowspan="1" colspan="1">This document</td>
|
||
</tr>
|
||
<tr>
|
||
<td class="text-left" rowspan="1" colspan="1">
|
||
<code>override_reason</code>
|
||
</td>
|
||
<td class="text-left" rowspan="1" colspan="1">Human-readable override justification</td>
|
||
<td class="text-left" rowspan="1" colspan="1">This document</td>
|
||
</tr>
|
||
<tr>
|
||
<td class="text-left" rowspan="1" colspan="1">
|
||
<code>override_expiry</code>
|
||
</td>
|
||
<td class="text-left" rowspan="1" colspan="1">Override expiration timestamp</td>
|
||
<td class="text-left" rowspan="1" colspan="1">This document</td>
|
||
</tr>
|
||
</tbody>
|
||
</table>
|
||
</div>
|
||
</section>
|
||
</div>
|
||
</section>
|
||
</div>
|
||
<div id="sec-combined-references">
|
||
<section id="section-8">
|
||
<h2 id="name-references">
|
||
<a href="#section-8" class="section-number selfRef">8. </a><a href="#name-references" class="section-name selfRef">References</a>
|
||
</h2>
|
||
<div id="sec-normative-references">
|
||
<section id="section-8.1">
|
||
<h3 id="name-normative-references">
|
||
<a href="#section-8.1" class="section-number selfRef">8.1. </a><a href="#name-normative-references" class="section-name selfRef">Normative References</a>
|
||
</h3>
|
||
<dl class="references">
|
||
<dt id="I-D.nennemann-agent-dag-hitl-safety">[I-D.nennemann-agent-dag-hitl-safety]</dt>
|
||
<dd>
|
||
<span class="refTitle">"Agent Context Policy Token: DAG Delegation with Human Override"</span>, <span>n.d.</span>, <span><<a href="https://datatracker.ietf.org/doc/draft-nennemann-agent-dag-hitl-safety/">https://datatracker.ietf.org/doc/draft-nennemann-agent-dag-hitl-safety/</a>></span>. </dd>
|
||
<dd class="break"></dd>
|
||
<dt id="I-D.nennemann-wimse-ect">[I-D.nennemann-wimse-ect]</dt>
|
||
<dd>
|
||
<span class="refTitle">"Execution Context Tokens for Distributed Agentic Workflows"</span>, <span>n.d.</span>, <span><<a href="https://datatracker.ietf.org/doc/draft-nennemann-wimse-ect/">https://datatracker.ietf.org/doc/draft-nennemann-wimse-ect/</a>></span>. </dd>
|
||
<dd class="break"></dd>
|
||
<dt id="RFC2119">[RFC2119]</dt>
|
||
<dd>
|
||
<span class="refAuthor">Bradner, S.</span>, <span class="refTitle">"Key words for use in RFCs to Indicate Requirement Levels"</span>, <span class="seriesInfo">BCP 14</span>, <span class="seriesInfo">RFC 2119</span>, <span class="seriesInfo">DOI 10.17487/RFC2119</span>, <time datetime="1997-03" class="refDate">March 1997</time>, <span><<a href="https://www.rfc-editor.org/rfc/rfc2119">https://www.rfc-editor.org/rfc/rfc2119</a>></span>. </dd>
|
||
<dd class="break"></dd>
|
||
<dt id="RFC7515">[RFC7515]</dt>
|
||
<dd>
|
||
<span class="refAuthor">Jones, M.</span>, <span class="refAuthor">Bradley, J.</span>, and <span class="refAuthor">N. Sakimura</span>, <span class="refTitle">"JSON Web Signature (JWS)"</span>, <span class="seriesInfo">RFC 7515</span>, <span class="seriesInfo">DOI 10.17487/RFC7515</span>, <time datetime="2015-05" class="refDate">May 2015</time>, <span><<a href="https://www.rfc-editor.org/rfc/rfc7515">https://www.rfc-editor.org/rfc/rfc7515</a>></span>. </dd>
|
||
<dd class="break"></dd>
|
||
<dt id="RFC7519">[RFC7519]</dt>
|
||
<dd>
|
||
<span class="refAuthor">Jones, M.</span>, <span class="refAuthor">Bradley, J.</span>, and <span class="refAuthor">N. Sakimura</span>, <span class="refTitle">"JSON Web Token (JWT)"</span>, <span class="seriesInfo">RFC 7519</span>, <span class="seriesInfo">DOI 10.17487/RFC7519</span>, <time datetime="2015-05" class="refDate">May 2015</time>, <span><<a href="https://www.rfc-editor.org/rfc/rfc7519">https://www.rfc-editor.org/rfc/rfc7519</a>></span>. </dd>
|
||
<dd class="break"></dd>
|
||
<dt id="RFC8174">[RFC8174]</dt>
|
||
<dd>
|
||
<span class="refAuthor">Leiba, B.</span>, <span class="refTitle">"Ambiguity of Uppercase vs Lowercase in RFC 2119 Key Words"</span>, <span class="seriesInfo">BCP 14</span>, <span class="seriesInfo">RFC 8174</span>, <span class="seriesInfo">DOI 10.17487/RFC8174</span>, <time datetime="2017-05" class="refDate">May 2017</time>, <span><<a href="https://www.rfc-editor.org/rfc/rfc8174">https://www.rfc-editor.org/rfc/rfc8174</a>></span>. </dd>
|
||
<dd class="break"></dd>
|
||
<dt id="RFC9110">[RFC9110]</dt>
|
||
<dd>
|
||
<span class="refAuthor">Fielding, R., Ed.</span>, <span class="refAuthor">Nottingham, M., Ed.</span>, and <span class="refAuthor">J. Reschke, Ed.</span>, <span class="refTitle">"HTTP Semantics"</span>, <span class="seriesInfo">STD 97</span>, <span class="seriesInfo">RFC 9110</span>, <span class="seriesInfo">DOI 10.17487/RFC9110</span>, <time datetime="2022-06" class="refDate">June 2022</time>, <span><<a href="https://www.rfc-editor.org/rfc/rfc9110">https://www.rfc-editor.org/rfc/rfc9110</a>></span>. </dd>
|
||
<dd class="break"></dd>
|
||
</dl>
|
||
</section>
|
||
</div>
|
||
<div id="sec-informative-references">
|
||
<section id="section-8.2">
|
||
<h3 id="name-informative-references">
|
||
<a href="#section-8.2" class="section-number selfRef">8.2. </a><a href="#name-informative-references" class="section-name selfRef">Informative References</a>
|
||
</h3>
|
||
<dl class="references">
|
||
<dt id="I-D.nennemann-agent-gap-analysis">[I-D.nennemann-agent-gap-analysis]</dt>
|
||
<dd>
|
||
<span class="refTitle">"Gap Analysis of IETF Standards for Agentic AI Workflows"</span>, <span>n.d.</span>, <span><<a href="https://datatracker.ietf.org/doc/draft-nennemann-agent-gap-analysis/">https://datatracker.ietf.org/doc/draft-nennemann-agent-gap-analysis/</a>></span>. </dd>
|
||
<dd class="break"></dd>
|
||
</dl>
|
||
</section>
|
||
</div>
|
||
</section>
|
||
</div>
|
||
<div id="acknowledgments">
|
||
<section id="appendix-A">
|
||
<h2 id="name-acknowledgments">
|
||
<a href="#name-acknowledgments" class="section-name selfRef">Acknowledgments</a>
|
||
</h2>
|
||
<p id="appendix-A-1">This document absorbs and supersedes the override protocol aspects
|
||
of the Human Emergency Override Protocol (HEOP) and the HITL
|
||
Primitives specification. The override level design is inspired
|
||
by industrial safety systems (IEC 62061, ISO 13849). The protocol
|
||
integrates with the Agent Context Policy Token
|
||
<span>[<a href="#I-D.nennemann-agent-dag-hitl-safety" class="cite xref">I-D.nennemann-agent-dag-hitl-safety</a>]</span> for authorization and the
|
||
Execution Context Token <span>[<a href="#I-D.nennemann-wimse-ect" class="cite xref">I-D.nennemann-wimse-ect</a>]</span> for audit.<a href="#appendix-A-1" class="pilcrow">¶</a></p>
|
||
</section>
|
||
</div>
|
||
<div id="authors-addresses">
|
||
<section id="appendix-B">
|
||
<h2 id="name-authors-address">
|
||
<a href="#name-authors-address" class="section-name selfRef">Author's Address</a>
|
||
</h2>
|
||
<address class="vcard">
|
||
<div dir="auto" class="left"><span class="fn nameRole">Christian Nennemann</span></div>
|
||
<div dir="auto" class="left"><span class="org">Independent Researcher</span></div>
|
||
<div class="email">
|
||
<span>Email:</span>
|
||
<a href="mailto:ietf@nennemann.de" class="email">ietf@nennemann.de</a>
|
||
</div>
|
||
</address>
|
||
</section>
|
||
</div>
|
||
<script>const toc = document.getElementById("toc");
|
||
toc.querySelector("h2").addEventListener("click", e => {
|
||
toc.classList.toggle("active");
|
||
});
|
||
toc.querySelector("nav").addEventListener("click", e => {
|
||
toc.classList.remove("active");
|
||
});
|
||
</script>
|
||
</body>
|
||
</html>
|