From bjorn.hjelm at oidf.org Mon Aug 24 19:02:43 2026 From: bjorn.hjelm at oidf.org (Bjorn Hjelm) Date: Mon, 24 Aug 2026 19:02:43 +0000 Subject: [Openid-specs-igov] Where does formally-verified, decision-level enforcement fit relative to Identity Governance? In-Reply-To: References: Message-ID: Hi Ali, Per the iGov WG overview (https://openid.net/wg/igov/), the working group is developing security and privacy profiles of the OpenID Connect specifications to enable users to authenticate and share consented attribute information with public sector services. Kind Regards, Bjorn ________________________________ From: Openid-specs-igov on behalf of Ali pourrahim via Openid-specs-igov Sent: Saturday, August 22, 2026 6:05 AM To: openid-specs-igov at lists.openid.net Subject: [Openid-specs-igov] Where does formally-verified, decision-level enforcement fit relative to Identity Governance? Hello, I'm a new OIDF individual contributor (Contribution Agreement processed 3 Aug) and have been posting introductions and technical questions to a few working group lists (specs, AuthZEN, Account Linking) as I get oriented. I've spent the past year building AuthGate, a capability-security PEP for AI agent tool-call authorization - Rust, formally specified in TLA+/Lean4, with a non-amplification proof as its core guarantee: a delegated capability can never structurally exceed what the delegator held, and every authorization decision produces a verifiable audit chain. Given this group's focus on identity governance, I'd value knowing whether formally-verified, audit-complete enforcement at the individual-decision level (as opposed to policy-level governance) is something this working group considers in scope, or whether it sits entirely outside IGov's remit. Happy to share the repository or a short writeup if useful either way. Repository: https://www.google.com/url?q=http://github.com/Aliipou/authgate-kernel&source=gmail&ust=1787490338353000&sa=E Best, Ali Pourrahim -------------- next part -------------- An HTML attachment was scrubbed... URL: