Cedulon Decision Profile: Reconciling an Agent's Decisions Against Its Effects (draft-dogru-cedulon-decision-profile-04)

Internet-Draft draft-dogru-cedulon-decision-profile-04, Cedulon Decision Profile: Reconciling an Agent's Decisions Against Its Effects, as posted to the IETF Datatracker on 5 October 2026 (submission 169844), with its XML source and the Markdown it was rendered from. The profile defines a second population on the Cedulon reconciler: a Decision Record is signed by the party that decided whether an agent may act, an Effect Extract is an authenticated list of the effects that occurred on a channel, an allow must be matched by exactly one effect whose content hash the record named, and a refusal by none. This revision answers two outside runs of the second implementation's test vectors. A checkpoint may be signed under a separate key that the deployment names and the verifier pins as part of the decider root (MUST-DP-11). The context behind inputsHash is a deployment statement, as the request already was. Single-row extracts are receipts rather than windows, and a deployment that signs them must state how a reader learns which allows should have a row (MUST-DP-12). Implementation Status records Verax, a second implementation by the same author, and the two runs, which are datapoints rather than conformance; the core reference moves to draft-dogru-cedulon-09. Files: the plain text and the XML source as posted, byte-identical to the IETF archive copies (SHA-256 0d7d474664d0d49b656320871cc34c0b63b3c88c711cdab5cc7d7dbbfcb367f4 and 49aa19a489eda798fe7fb69a8a06abb9c06e538277dc9b0dcb46c08a3dc10c9c), and the Markdown source from commit 04ae22b of dogrucanemek-alt/cedulon, the commit that recorded the posted revision; the XML in that commit differs from the posted file only in line endings. This is an individual submission and a work in progress; the text calls its requirement language provisional. The Internet-Draft text is subject to BCP 78 and the IETF Trust's Legal Provisions; the repository it is taken from is licensed under Apache-2.0.