Protocol · open pattern

Govern your Agent2Agent Protocol (A2A) agents.

Govern the pipes once. Govern every client.

A2A tasks and artifacts are typed events with named consumers — the standard's event-bus requirement expressed as an interop protocol. Ledger at the task boundary and inter-agent work becomes provable.

Why govern A2A agents

Framework-independent leverage

Every agent that speaks the protocol inherits governance from the boundary — no per-framework adapter, no SDK dependency, no redeployment of the agents themselves.

The chokepoint is already there

Protocol boundaries are where tool calls and tasks already flow. A governing gateway makes that boundary an ownership gate and an append-only ledger — the two hardest substrate requirements, solved at the layer designed for interception.

Interop with receipts

Cross-vendor agent ecosystems only work if the work is provable across trust boundaries. A ledgered protocol boundary is how two organizations’ agents cooperate and both sides keep a record they trust.

How it works with Agent2Agent Protocol (A2A)

The pattern for agent protocols: Gateway governance: a governing proxy at the protocol boundary ledgers every call or task and enforces ownership gates for any compliant client — one integration governs an entire ecosystem, framework by framework, without touching any of them.

Why A2A fits: A2A tasks and artifacts are typed events with named consumers — the standard's event-bus requirement expressed as an interop protocol. Ledger at the task boundary and inter-agent work becomes provable.

  1. Deploy the governing gateway in front of your protocol servers — clients connect to the gateway instead.
  2. Register exposed tools and tasks as levers with named owners; the gateway enforces the gate.
  3. The gateway writes the ledger: every call, task, and artifact with input, output, and outcome.
  4. Key duties to protocol-level outcomes (task completed with verified artifact, not just responded).
  5. Sweep the gateway’s substrate with the free Audit — every connected client is now in scope.

The full requirements live in the open standard (CC BY 4.0) — the substrate shapes, the acceptance tests, and the conformance ladder your record is measured against.

What you can claim

A governed protocol boundary lets every system behind it claim a real, inspectable ledger — and the gateway operator can publish its own conformance record to the registry with probe logs. As always: self-assessed, open to challenge, never “certified.”

Status — kept honest

Integration pattern: documented (this page). The A2A adapter, mapping, or worked example is being built in the open — progress, scope, and acceptance criteria live in the public GitHub issue. This page will not say “supported” before that issue closes with a working example. Holding our own pages to the standard’s claims discipline is not modesty; it is the product.

Build this with us

For gateway vendors, protocol implementers, and platform teams standardizing on agent protocols: governance-at-the-boundary is a product surface, not a feature — and the reference pattern is open. We co-develop the pattern in public and route ecosystem-level governance inquiries to the implementers who ship it.

Agent2Agent Protocol (A2A) governance — FAQ

Does a governing gateway add latency to every call?
A gate check and an async ledger write — the same class of overhead as authentication and logging, which every production gateway already pays. The outcome verification runs out-of-band against the record, not in the request path.
Is this a fork or extension of the protocol?
Neither. The gateway speaks the protocol unmodified in both directions; governance lives in the boundary’s own substrate. Clients and servers need zero changes.
What is “performed autonomy”?
Agents that look busy — fluent plans, satisfied logs — but don’t verifiably ship. Motion is not delivery. GOVENANT measures verified outcomes against the record, never the logs’ self-report.
What is GOVENANT, and who controls it?
An open standard for provable AI agent governance: three laws, a conformance ladder, and acceptance tests any implementation can run against its own record. It is free to all under CC BY 4.0 with a citable companion paper (DOI 10.5281/zenodo.21440225), and conformance is self-assessed and published openly — no certifying authority, no gatekeeper.

More agent protocols

Different stack? Browse all 45 integrations — or run the free audit from any MCP-capable tool.