Skip to content

Add Local Delegated Agent Identity Architecture draft#1

Merged
JillRegan merged 10 commits into
mainfrom
jill/public-specs
Jul 17, 2026
Merged

Add Local Delegated Agent Identity Architecture draft#1
JillRegan merged 10 commits into
mainfrom
jill/public-specs

Conversation

@JillRegan

@JillRegan JillRegan commented Jul 16, 2026

Copy link
Copy Markdown
Collaborator

Adds the first published IETF Internet-Draft in 1Password's Agent Identity series, plus the repo scaffolding to render it as HTML via GitHub Pages.

What's included

  • draft-1password-agent-identity-local-delegated.md -> the draft-1password-agent-identity-local-delegated-00 (kramdown-rfc).
  • Build pipeline -> Makefile + .github/workflows/build.yml render the draft to .html/.txt/.xml (kramdown-rfc + xml2rfc) and deploy to GitHub Pages. scripts/gen-index.sh generates a landing page by globbing draft-*.html.
  • Assets -> assets/1password.css, logo/icon SVGs, and the four local-delegated architecture diagrams.
  • Refcache — pinned XML for the 14 referenced RFCs.

Notes for reviewers

  • Build outputs (draft-*.html/.txt/.xml) are git-ignored; CI renders them.
  • Companion draft draft-1password-os-level-workload-attestation is referenced throughout but not yet published

Comment thread .github/workflows/build.yml Outdated
Comment on lines +34 to +35
gem install kramdown-rfc
python -m pip install xml2rfc

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Let's pin these dependencies to the known good versions.

Copy link
Copy Markdown
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Done!

Comment thread .github/workflows/build.yml Outdated
Comment on lines +11 to +12
pages: write
id-token: write

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Small nit but it could be possible to scope the write permissions directly onto the deploy job (link) rather than the whole workflow.

Copy link
Copy Markdown
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Done!

Comment thread scripts/reorder-back.py
Comment on lines +43 to +44
if not all([parent_refs_block, norm_block, inf_block, ack_block, about_block]):
sys.exit(0)

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

What do you think about failing loudly here, if an expected block isn't found?

@JillRegan JillRegan Jul 17, 2026

Copy link
Copy Markdown
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yeah good point but I think we maybe should leave atm and log something in the backlog to look more deeply into this reorder script. It hard-codes assumptions about the current draft's structure (references at s13, the 13.1/13.2 numbering, ack blocks), so future drafts may not match. I think we should leave as is for now and I'll write up a follow-up ticket.

Comment thread Makefile
Comment on lines +39 to +40
lint: $(TXT)
@for f in $(TXT); do idnits --verbose $$f; done

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Would it be useful to make lint in CI as well?

Copy link
Copy Markdown
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Agreed!

@JillRegan
JillRegan merged commit 01520c4 into main Jul 17, 2026
3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants