Peers

Other parties’ agents this factory speaks A2A with. Each is admitted the way a tool server is: its agent card is fetched signed and pinned by digest, and nothing is sent to it, or heard from it, until a person approves the card. A card that changes detaches the peer until someone approves it again. Every request both ways is signed under a secret the two sides share, held in the vault and shown here by name only.

Registered peersReading the registry…One approval admits a peer; two-person approval is off on this deployment.