Requirements for the Discovery of Agents, Workloads, and Named Entities (DAWN)

Introduction Modern distributed systems increasingly rely on the dynamic composition of services, agents, and workloads that may not have pre-configured relationships. For example, an AI agent may need to find another agent with specific capabilities, a workload orchestrator may need to locate compute resources in a particular jurisdiction, or a service consumer may need to discover providers that support a required protocol version. Further use cases and scenarios are expected to be documented separately. In each case, an entity needs knowledge of remote entities before interaction can proceed: what they are, what they offer, and whether they can be trusted. Such knowledge could be obtained through static configuration, but this approach is impractical at scale and across organisational boundaries. Automated discovery mechanisms are therefore needed. Today, where automated discovery exists, it is typically handled through proprietary directories or platform-specific mechanisms. These approaches do not scale across organisational boundaries and create fragmented ecosystems where entities cannot find entities managed by other organisations. An interoperable discovery mechanism is needed that builds on existing protocols and tools, benefits from an established trust model, supports proven delegation and federation architectures, and allows organisations to independently publish discovery information. This document defines requirements that any Discovery of Agents, Workloads, and Named Entities (DAWN) mechanism must satisfy. It is informed by:

DAWN Problem Statement I-D.
AI Agent Discovery Problem Statement I-D.

Scope The requirements in this document address what information must be discoverable about entities, what properties a discovery mechanism must support, and what architectural constraints apply. The detailed requirements are set out in . These requirements are intended to be solution-neutral. They do not require discovery information, endpoint information, capability descriptions, or capability cards to be carried directly in any particular protocol element or data record. A discovery mechanism may return such information directly or provide a reference to another resource from which the information can be obtained, provided that the requirements for authenticity, integrity, interoperability, and usability are satisfied. The following topics are explicitly out of scope:

Entity registration processes, including attestation and other security mechanisms for registration;
Design, definition, and governance of naming systems for entities;
Trust, authentication, and authorisation of entities themselves (as distinct from trust in discovery information);
Capability exchange and negotiation between entities;
Entity selection mechanisms and policies;
Task management and orchestration;
Agent-to-agent communication protocols.

Terminology This document uses the following terms defined in :

Agent
Capability
Capability Card
Capability Exchange
Discovering Entity
Discovery
Discovery Mechanism
Entity
Function
Named Entity
Properties
Selection
Trust Indicator
Workload

Conventions and Definitions Although this is an informational requirements document, key words in upper case are used for clarity of stating the requirements. The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", "NOT RECOMMENDED", "MAY", and "OPTIONAL" in this document are to be interpreted as described in BCP 14 when, and only when, they appear in all capitals, as shown here.

Requirements The requirements are organised into the following categories: discovery actors and scenarios, entity classification, entity properties, trust and security, scalability and architecture, discovery protocol, and extensibility.

Discovery Actors and Scenarios

REQ-DISC-1:: A discovery mechanism MUST support discovery initiated by any type of entity, including agents, services, workloads, and human operators.
REQ-DISC-2:: A discovery mechanism MUST support the discovery of both specific entity instances and classes of entities that can perform a desired function.
REQ-DISC-3:: A discovery mechanism MUST identify the primary scenario groupings (categories) of entities where discovery is needed and address the specific discovery requirements of each category.
REQ-DISC-4:: A discovery mechanism MUST define where discovery fits within the overall workflow of entity interaction, distinguishing discovery from registration, selection, and capability exchange.
REQ-DISC-5:: A discovery mechanism SHOULD support discovery of intermediary aggregation points or brokers that can provide further dynamic information about entities.

Entity Classification

REQ-CLASS-1:: A discovery mechanism MUST allow entities to be classified by type (e.g., AI agent, service, workload, network function).
REQ-CLASS-2:: A discovery mechanism MUST allow entities to be classified by the function or capability they provide.
REQ-CLASS-3:: A discovery mechanism SHOULD allow entities to be associated with a geographic or jurisdictional location.
REQ-CLASS-4:: A discovery mechanism SHOULD allow entities to be associated with an owning or operating organisation.
REQ-CLASS-5:: A discovery mechanism SHOULD allow entities to be associated with a source or origin (e.g., the standards body, vendor, or open-source project that defined the entity's interface).

Entity Properties

REQ-PROP-1:: A discovery mechanism MUST define a set of mandatory base properties that every discoverable entity provides.
REQ-PROP-2:: A discovery mechanism MUST support the discovery of communication protocols and transport parameters needed to interact with an entity, either directly or by reference to another resource.
REQ-PROP-3:: A discovery mechanism MUST support the discovery of capability descriptions for an entity, either directly or by reference to another resource.
REQ-PROP-4:: A discovery mechanism MUST distinguish between static properties (e.g., entity type, supported protocols) and dynamic properties (e.g., operational status, current load).
REQ-PROP-5:: A discovery mechanism SHOULD support the association of version information with entity properties and capability descriptions.
REQ-PROP-6:: A discovery mechanism MUST support the identification of the party responsible for an entity. The mechanism SHOULD also allow entities to be registered anonymously where appropriate.
REQ-PROP-7:: A discovery mechanism SHOULD support the discovery of an entity's functional capacity, such as the scope or volume of work it can perform.
REQ-PROP-8:: A discovery mechanism MUST support the discovery of security-related communication parameters needed to establish a secure connection with an entity, either directly (e.g., through protocol-level fields) or by reference to an external capability descriptor that contains details such as supported Transport Layer Security (TLS) versions and authentication methods.
REQ-PROP-9:: A discovery mechanism MUST support the discovery of capability cards or equivalent structured, machine-readable descriptions of an entity's interface and functions, either directly or by reference to another resource.
REQ-PROP-10:: A discovery mechanism MUST categorise each discoverable property as mandatory or optional, so that consumers of discovery information can determine which properties are guaranteed to be present.
REQ-PROP-11:: A discovery mechanism MUST indicate whether each property is static, mainly static, or dynamic, so that consumers can determine appropriate caching and refresh strategies.
REQ-PROP-12:: A discovery mechanism SHOULD support the discovery of attestation, provenance, policy, or risk-related information about an entity, either directly or by reference to another resource.

Trust and Security

REQ-SEC-1:: A discovery mechanism MUST provide a means to verify the authenticity and integrity of discovery information.
REQ-SEC-2:: A discovery mechanism MUST support the use of cryptographic trust indicators (e.g., digital signatures, certificates) to establish the provenance of entity information.
REQ-SEC-3:: A discovery mechanism MUST be resilient to attacks that could poison or corrupt discovery information.
REQ-SEC-4:: A discovery mechanism SHOULD allow an entity to control the visibility of its properties to different audiences (e.g., public versus organisation-internal discovery).
REQ-SEC-5:: A discovery mechanism SHOULD support operation across trust boundaries without requiring a single global trust anchor.
REQ-SEC-6:: A discovery mechanism MUST be designed to limit its use as a vector for abuse, including amplification, scraping, denial-of-service, or unauthorised disclosure of discovery information.
REQ-SEC-7:: A discovery mechanism SHOULD support auditability of publication and discovery operations where required by deployment policy, regulation, or operational practice.

Scalability and Architecture

REQ-ARCH-1:: A discovery mechanism MUST be capable of operating in decentralised architectures.
REQ-ARCH-2:: A discovery mechanism MUST NOT require a single centralised registry as a prerequisite for operation.
REQ-ARCH-3:: A discovery mechanism MUST scale to support discovery across a large number of entities and administrative domains.
REQ-ARCH-4:: A discovery mechanism SHOULD allow organisations to independently publish discovery information without depending on a third-party directory.
REQ-ARCH-5:: A discovery mechanism SHOULD support discovery across heterogeneous network environments, including cloud, edge, and enterprise networks.
REQ-ARCH-6:: A discovery mechanism MUST NOT assume that discovered entities have stable, symmetric, or publicly routable network paths. It SHOULD support discovery of information needed to use relays, proxies, or rendezvous mechanisms where direct connectivity is infeasible.

Discovery Protocol

REQ-PROTO-1:: A discovery mechanism MUST define the protocols used by discovering entities to communicate with discovery enablers (e.g., discovery servers, directories, or DNS resolvers).
REQ-PROTO-2:: A discovery mechanism SHOULD be built in a modular way using existing Internet Engineering Task Force (IETF) protocols where possible, filling gaps only where existing protocols are insufficient.
REQ-PROTO-3:: A discovery mechanism SHOULD support different protocols for different discovery scenarios where a single protocol cannot efficiently serve all use cases.
REQ-PROTO-4:: A discovery mechanism MUST define a predictable entry point for discovery that is based on ubiquitous and interoperable mechanisms.

Extensibility

REQ-EXT-1:: A discovery mechanism MUST support the addition of new entity types and property definitions without requiring changes to the core mechanism.
REQ-EXT-2:: A discovery mechanism MUST support structured, versioned schemas for entity properties to enable backward-compatible evolution.
REQ-EXT-3:: A discovery mechanism SHOULD allow domain-specific or industry-specific extensions to entity properties.
REQ-EXT-4:: A discovery mechanism SHOULD support schema lifecycle information, such as deprecation status, sunset timing, and compatibility information, so that consumers can handle backward-compatible evolution of entity properties and capability descriptions.

IANA Considerations This document does not make any requests of IANA.

Security Considerations This document defines requirements for entity discovery mechanisms. It does not define a protocol and therefore does not introduce specific security vulnerabilities. However, the requirements in place security constraints on any solution that satisfies these requirements. Implementers of discovery mechanisms that satisfy these requirements should pay particular attention to the following concerns:

The integrity and authenticity of discovery information must be protected to prevent poisoning attacks that could direct entities to malicious endpoints.
Access control mechanisms should be considered to prevent unauthorised disclosure of entity properties, particularly in environments where entity metadata may be sensitive.
The discovery mechanism itself must not become a vector for denial-of-service attacks against the infrastructure on which it is built.

Privacy Considerations Discovery mechanisms inherently involve the publication of information about entities. Implementers should consider the privacy implications of exposing entity properties, capabilities, and organisational associations. In particular:

Entities should be able to control what information is made publicly discoverable versus restricted to specific audiences.
The discovery mechanism should not require the disclosure of information beyond what is necessary for a discovering entity to determine whether interaction is appropriate.
Where entities represent individuals or process personal data, compliance with applicable data protection regulations should be considered.

Operational Considerations Discovery mechanisms that satisfy these requirements will need to be deployable across public and private networks, across organisational boundaries, and across heterogeneous operational environments. Operators should consider publication workflows, update and withdrawal procedures, caching and refresh behaviour, observability, operational policy, and the impact of discovery traffic on the infrastructure used to support the mechanism.

Acknowledgements The authors wish to acknowledge the contributions of participants in the DAWN discussions that shaped this document, including Jim Mozley and Balazs Nemethi.