HDP：面向代理AI系统中人类委托溯源的轻量级密码学协议

HDP: A Lightweight Cryptographic Protocol for Human Delegation Provenance in Agentic AI Systems

April 6, 2026

作者: Asiri Dalugoda

cs.AI

摘要

随着智能体AI系统越来越多地代表人类主体执行关键操作，任务委派通过自主智能体构成的多步链式结构实现。现有标准均未解决一个根本性的问责缺口：如何验证委派链中的终端操作确实经由人类主体授权、通过何种委派链条、以及在何种权限范围内执行。本文提出人类委派溯源（HDP）协议，这是一种基于令牌的轻量级方案，通过密码学方式在多智能体系统中捕获并验证人类授权上下文。HDP令牌将人类授权事件与会话绑定，以仅追加链的形式记录每个智能体的委派操作作为签名跳点，使参与者仅凭发行方的Ed25519公钥和当前会话标识符即可验证完整溯源记录。验证过程完全离线进行，无需注册表查询或第三方信任锚点。我们将HDP置于现有委派协议体系中，明确其相对于OAuth 2.0令牌交换（RFC 8693）、JSON Web令牌（RFC 7519）、UCAN以及意图溯源协议（draft-haberkamp-ipp-00）的独特设计定位，论证现有标准无法满足智能体系统对多跳、仅追加、人类溯源的核心需求。HDP已作为IETF互联网草案（draft-helixar-hdp-agentic-delegation-00）发布，并公开提供TypeScript参考开发工具包。

English

Agentic AI systems increasingly execute consequential actions on behalf of human principals, delegating tasks through multi-step chains of autonomous agents. No existing standard addresses a fundamental accountability gap: verifying that terminal actions in a delegation chain were genuinely authorized by a human principal, through what chain of delegation, and under what scope. This paper presents the Human Delegation Provenance (HDP) protocol, a lightweight token-based scheme that cryptographically captures and verifies human authorization context in multi-agent systems. An HDP token binds a human authorization event to a session, records each agent's delegation action as a signed hop in an append-only chain, and enables any participant to verify the full provenance record using only the issuer's Ed25519 public key and the current session identifier. Verification is fully offline, requiring no registry lookups or third-party trust anchors. We situate HDP within the existing landscape of delegation protocols, identify its distinct design point relative to OAuth 2.0 Token Exchange (RFC 8693), JSON Web Tokens (RFC 7519), UCAN, and the Intent Provenance Protocol (draft-haberkamp-ipp-00), and demonstrate that existing standards fail to address the multi-hop, append-only, human-provenance requirements of agentic systems. HDP has been published as an IETF Internet-Draft (draft-helixar-hdp-agentic-delegation-00) and a reference TypeScript SDK is publicly available.