What happened
On 16 October 2026 the individual Internet-Draft was updated to revision -01 (last updated 2026-10-16, Standards Track). A2WP defines how an AI agent passes credential offers/presentation requests to a user's digital Wallet unchanged; the Wallet decides whether to act, obtains approval, and performs issuance/presentation so credentials, presentations, and keys never reach the (potentially manipulated) AI agent.
Why it matters
A security-by-architecture answer to agent credential compromise: it keeps private keys and identity credentials outside the agent's control, which matters for agentic AI interacting with verifiable-credential systems (identity, payments, access). The -01 revision advances lifecycle, security, and continuation handling.
Action needed
Review A2WP for agent/wallet interaction models; consider alignment with your verifiable-credential and agent deployments.