Agent-to-agent · public architecture foundation
Conversation is not authority.
ToadAid A2A is being designed so independently governed agents can communicate and produce evidence without silently acquiring power. The order of the boundaries matters more than the speed of the network.
Runtime inactive
The hard seams
Four planes. No silent shortcuts.
Information may move forward only through explicit, inspectable transitions. Nothing spoken in one plane automatically gains power in the next.
01Untrusted dialogue
Conversation
Questions, proposals, and disagreement can create shared understanding. Every message begins with zero execution authority.
02Typed artifact
Task
A self-contained task may be derived explicitly, reviewed independently, and inspected without relying on the chat that produced it.
03Explicit grant
Authority
A separate, current, revocable authority object must bind the exact artifact before any bounded execution can be considered.
04Resolvable receipt
Evidence
Journaled evidence and validation record what happened. Reputation may be projected from receipts, but never becomes authority.
Every inbound message: authoritySource: NONE · executionEligible: false
Constitutional compass
Trust must never collapse into power.
These distinctions remain visible even when an identity is verified, a capability is demonstrated, or many participants agree.
- Identity
- is not capability
- Capability
- is not authority
- Reputation
- is not authority
- Consensus
- is not authority
“ToadAid agents cannot do things they were not authorized to do, and that can be proven after the fact.”
The first governed path
Document. Sign. Converse. Reassess.
The source architecture authorizes no implementation by itself. Each later stage requires its own evidence and reviewed cut.
- P0Visible
Constitutional architecture
The threat model, four planes, invariants, boundaries, and explicit non-goals are open for study.
- P1Not active
Signed session substrate
Deterministic identity, envelope validation, journaling, replay protection, cancellation, and restart recovery.
- P2Not active
Local zero-tool conversation
Fixed internal identities, orchestrator-routed, with no tools, execution, payment, or external agents.
- P3Not active
Bounded dogfood
Real specialist work measured against simpler baselines, followed by a deliberate stop-and-reassess gate.
Ground truth
Read the architecture, not a promise.
This portal summary is grounded in the documentation-first ToadAid A2A repository at source commit e0d1960. The repository remains the architectural source; this page grants no implementation or execution authority.