News · September 2026
XATF published in IEEE Access
“XATF: A Carrier-Binding Verification Profile With Typed Failure Attribution for AI-Agent Evidence Over X-Road” is published in IEEE Access, volume 14, pages 143470–143483, open access under the Creative Commons Attribution licence, doi:10.1109/ACCESS.2026.3732535.
X-Road is the data-exchange layer that Estonia, Finland and others run between public registers. A successful exchange over it proves that two security servers agreed, and nothing more: whether an AI agent on one side was allowed to do what it did is a separate question. XATF separates three states that a carrier alone conflates: carrier acceptance, the binding between the carrier record and the evidence it carried, and the appraisal of the Action Evidence Package itself. A request with valid signatures still fails when its X-Road request identifier and the carrier record fail to bind, and the failure is attributed to a type rather than reported as a generic error.
The profile is executable. Algorithm 1 runs against a real X-Road development-stack exchange and an 18-case strict-profile corpus, with the expected outcome and attribution reproduced in both the Python and the Node implementations. The reproducibility package is on Zenodo, 10.5281/zenodo.20613101. X-Road is not made the verifier; it stays the carrier.
The article is the journal anchor of the carrier-bound-evidence line that also produced the RAISE workshop study and the XAI-EADM position paper presented in September 2026, and the X-Road AI Evidence Lab.