CLAIM-2026-08-19-07

A2A version 1.0 introduced Signed Agent Cards: deterministic JSON canonicalisation, cryptographic signature, and client-side verification against the agent's public keys, so that a card cannot be tampered with in distribution.

Why it matters

This is the protocol's answer to trust, and it is an answer about the sender's identity. Reading it as an answer about content is the error the edition corrects.

Sources

  • linuxfounda2026aa
  • aaproject2026agentagen