HDP：面向智能体AI系统中人类委托溯源的轻量级密码学协议

HDP: A Lightweight Cryptographic Protocol for Human Delegation Provenance in Agentic AI Systems

April 6, 2026

作者: Asiri Dalugoda

cs.AI

摘要

随着代理型人工智能系统日益频繁地代表人类主体执行关键操作，任务委派正通过自主智能体构成的多步链式结构实现。现有标准均未解决一个根本性的问责缺口：如何验证委派链中的终端操作确实经由人类主体授权、通过何种委派链条、以及在何种权限范围内执行。本文提出人类委派溯源协议，这是一种基于令牌的轻量级方案，通过密码学方式捕获并验证多智能体系统中的人类授权上下文。HDP令牌将人类授权事件与会话绑定，以仅可追加的链式结构记录每个智能体的委派操作作为签名跳转点，使参与者仅凭签发者的Ed25519公钥和当前会话标识符即可验证完整溯源记录。验证过程完全离线进行，无需注册表查询或第三方信任锚点。我们将HDP置于现有委派协议体系中，厘清其相对于OAuth 2.0令牌交换、JSON Web令牌、UCAN及意图溯源协议的设计差异，论证现有标准无法满足代理系统对多跳、仅追加、人类溯源的特定需求。HDP已作为IETF互联网草案发布，并配有公开的TypeScript参考开发套件。

English

Agentic AI systems increasingly execute consequential actions on behalf of human principals, delegating tasks through multi-step chains of autonomous agents. No existing standard addresses a fundamental accountability gap: verifying that terminal actions in a delegation chain were genuinely authorized by a human principal, through what chain of delegation, and under what scope. This paper presents the Human Delegation Provenance (HDP) protocol, a lightweight token-based scheme that cryptographically captures and verifies human authorization context in multi-agent systems. An HDP token binds a human authorization event to a session, records each agent's delegation action as a signed hop in an append-only chain, and enables any participant to verify the full provenance record using only the issuer's Ed25519 public key and the current session identifier. Verification is fully offline, requiring no registry lookups or third-party trust anchors. We situate HDP within the existing landscape of delegation protocols, identify its distinct design point relative to OAuth 2.0 Token Exchange (RFC 8693), JSON Web Tokens (RFC 7519), UCAN, and the Intent Provenance Protocol (draft-haberkamp-ipp-00), and demonstrate that existing standards fail to address the multi-hop, append-only, human-provenance requirements of agentic systems. HDP has been published as an IETF Internet-Draft (draft-helixar-hdp-agentic-delegation-00) and a reference TypeScript SDK is publicly available.