This project
Borrowed Time: Extend-Only, Threshold-Attested Authority Renewal for Partitioned Agent Meshes
S. Chandra, Stellarminds.ai, aligned with Project NANDA.
↗draft-chandra-wimse-partition-tolerant-renewal-00
The normative message formats and verification procedure.
sm-renewal
Reference implementation: build/sign/evaluate/verify, conformance vectors, worked example.
External standards referenced
draft-ietf-wimse-arch
Workload Identity in a Multi System Environment (WIMSE) Architecture. Salowey, Rosomakho, Tschofenig.
↗ IETF DRAFTdraft-ietf-wimse-workload-creds
WIMSE Workload Credentials. Campbell, Salowey, Schwenkschuster, Sheffer, Rosomakho.
↗ IETF DRAFTdraft-ietf-wimse-identifier
Workload Identifier. Rosomakho, Salowey.
↗ CHARTERWIMSE Working Group Charter
Names the local-issuance work item this project hardens for the adversarial, disconnected case.
↗ SPECSPIFFE
Secure Production Identity Framework for Everyone. CNCF.
↗ RFC 4838Delay-Tolerant Networking Architecture
Cerf, V., et al. April 2007.
↗ RFC 8785JSON Canonicalization Scheme (JCS)
Rundgren, Jordan, Erdtman. The canonical serialization every signed object in this protocol uses.
↗ ARXIVBeyond DNS: Unlocking the Internet of AI Agents via the NANDA Index and Verified AgentFacts
Raskar, Chari, et al. July 2025.
↗ OSDI 1999Practical Byzantine Fault Tolerance
Castro, M., Liskov, B. The classical BFT supermajority this protocol's quorum threshold mirrors.
↗