XLS-draft: Ephemeral Attested Credentials & Enclave-Gated Domains (E-APD) (PR #651)

[whawk46]

Summary

This discussion tracks the proposed standard for Ephemeral Attested Permissioned Domains (E-APD) on the XRP Ledger, submitted in PR #651.

Motivation

Existing XLS-70 (Credentials) and XLS-80 (Permissioned Domains) use long-lived credentials that rely on reactive CredentialDelete transactions for revocation. For high-frequency autonomous AI agents and algorithmic participants, reactive revocation introduces latency and mempool front-running risks.

Proposed Architecture

E-APD inverts the revocation paradigm:

1. Short-TTL Credentials: Issued with deterministic, bounded TTLs (e.g., 300 to 900 seconds) tied directly to validated ledger close times.
2. Attested Hardware Enclaves: Off-chain Trusted Execution Environments (TEEs) monitor agent mandates and issue cryptographically verifiable renewals only while invariants hold.
3. Consensus-Enforced Venue Ejection: If an agent violates policy, renewal halts. On the very next ledger close (~3.5s), the credential expires naturally at L1 consensus (tecNO_PERMISSION), eliminating on-chain revocation transactions and front-running.

We welcome community feedback on the specification and reference implementation in PR #651.