Repository navigation
docs(nip-fi): propose agent authorization withdrawal - #9336
Draft
bradseiler wants to merge 1 commit into
Draft
bradseiler wants to merge 1 commit into
bradseiler wants to merge 1 commit into
Conversation
Signed-off-by: Brad Seiler <seiler@squareup.com>
This branch has not been deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
NIP-FI disconnects currently deny an entire key and close every matching session. A delayed disconnect can therefore interrupt fresh authorization for the same agent after a workspace transfer.
Propose an optional authorization-withdrawal profile that preserves the agent key. A signed command withdraws agent assertions issued before a cutoff; fresh destination authorization uses a later issuance time. The draft defines durable enforcement, completion across serving processes, key-wide denial precedence, compatibility fallback, and safe compaction and rollback.
This PR changes the specification only. It does not implement or enable the profile. Enforce mode and validation of every protected access surface are prerequisites. Issuers must serialize issuance and reconcile pending disconnects. Retained-data policy, treatment of in-flight work, removal policy and recovery of already-retired keys remain separate decisions.
Related issue
None found in searches for NIP-FI authorization withdrawal.
Testing
Independent review covered the normative draft and its compaction/rollback revision; both reported findings were resolved. Checked the diff, proposal anchor and code fences, and verified that the patch applies against baseline
30e1fa47fb9a67cbc408cfcee83dcf280ab49595. The reviewed specification SHA-256 isb5a410bb58850bd9e67e13034a22478dd3ba6c3dc0597ab00bbd7816456f5fc2.No runtime testing: this is a proposed protocol contract, with no implementation changes.
Generated with Codex