{"id":115126,"date":"2026-02-17T15:53:35","date_gmt":"2026-02-17T15:53:35","guid":{"rendered":"https:\/\/mailinvest.blog\/index.php\/2026\/02\/17\/ai-a2a-and-the-governance-gap-oreilly\/"},"modified":"2026-02-17T15:54:36","modified_gmt":"2026-02-17T15:54:36","slug":"ai-a2a-and-the-governance-gap-oreilly","status":"publish","type":"post","link":"https:\/\/mailinvest.blog\/index.php\/2026\/02\/17\/ai-a2a-and-the-governance-gap-oreilly\/","title":{"rendered":"AI, A2A, and the Governance Gap \u2013 O\u2019Reilly"},"content":{"rendered":"

<\/a>\n
<\/p>\n

\n

Over the previous six months, I\u2019ve watched the identical sample repeat throughout enterprise AI groups. A2A and ACP gentle up the room throughout structure critiques\u2014the protocols are elegant, the demos spectacular. Three weeks into manufacturing, somebody asks: \u201cWait, which agent licensed that $50,000 vendor fee at 2 am?\u201c The thrill shifts to concern.<\/p>\n

Right here\u2019s the paradox: Agent2Agent<\/a> (A2A) and the Agent Communication Protocol<\/a> (ACP) are so efficient at eliminating integration friction that they\u2019ve eliminated the pure \u201cbrakes\u201c that used to drive governance conversations. We\u2019ve solved the plumbing downside brilliantly. In doing so, we\u2019ve created a brand new class of integration debt\u2014one the place organizations borrow velocity right now at the price of accountability tomorrow.<\/p>\n

The technical protocols are strong. The organizational protocols are lacking. We\u2019re quickly transferring from the \u201cCan these methods join?\u201c part to the \u201cWho licensed this agent to liquidate a place at 3 am?\u201c part. In apply, that creates a governance hole: Our capability to attach brokers is outpacing our capability to manage what they commit us to.<\/p>\n

To see why that shift is occurring so quick, it helps to have a look at how the underlying \u201cagent stack\u201c is evolving. We\u2019re seeing the emergence of a three-tier construction that quietly replaces conventional API-led connectivity:<\/p>\n

\n\n\n\n\n\n\n
Layer<\/strong><\/td>\nProtocol examples<\/strong><\/td>\nObjective<\/strong><\/td>\nThe \u201chuman\u201d analog<\/strong><\/td>\n<\/tr>\n
Tooling<\/td>\nMCP (Mannequin Context Protocol)<\/td>\nConnects brokers to native knowledge and particular instruments<\/td>\nA employee\u2019s toolbox<\/td>\n<\/tr>\n
Context<\/td>\nACP (Agent Communication Protocol)<\/td>\nStandardizes how objectives, consumer historical past, and state transfer between brokers<\/td>\nA employee\u2019s reminiscence and briefing<\/td>\n<\/tr>\n
Coordination<\/td>\nA2A (Agent2Agent)<\/td>\nHandles discovery, negotiation, and delegation throughout boundaries<\/td>\nA contract or handshake<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/figure>\n

This stack makes multi-agent workflows a configuration downside as an alternative of a customized engineering challenge. That’s precisely why the chance floor is increasing sooner than most CISOs notice.<\/p>\n

Consider it this fashion: A2A is the handshake<\/em> between brokers (who talks to whom, about what duties). ACP is the briefing doc<\/em> they alternate (what context, historical past, and objectives transfer in that dialog). MCP is the toolbox<\/em> every agent has entry to domestically. When you see the stack this fashion, you additionally see the following downside: We\u2019ve solved API sprawl and quietly changed it with one thing tougher to see\u2014agent sprawl, and with it, a widening governance hole.<\/p>\n

Most enterprises already battle to control a whole lot of SaaS purposes. One evaluation places the common at greater than 370 SaaS apps per group. Agent protocols don’t scale back this complexity; they route round it. Within the API period, people filed tickets to set off system actions. Within the A2A period, brokers use \u201cAgent Playing cards\u201c to find one another and negotiate on high of these methods. ACP permits these brokers to commerce wealthy context\u2014that means a dialog beginning in buyer assist can movement into achievement and associate logistics with zero human handoffs. What was API sprawl is changing into dozens of semiautonomous processes performing on behalf of your organization throughout infrastructure you don’t totally management. The friction of guide integration used to behave as a pure brake on threat; A2A has eliminated that brake.<\/p>\n

That governance hole doesn\u2019t normally present up as a single catastrophic failure. It reveals up as a collection of small, complicated incidents the place all the pieces appears \u201cinexperienced\u201c within the dashboards however the enterprise end result is fallacious. The protocol documentation focuses on encryption and handshakes however ignores the emergent failure modes of autonomous collaboration. These should not bugs within the protocols; they\u2019re indicators that the encompassing structure has not caught up with the extent of autonomy the protocols allow.<\/p>\n

Coverage drift<\/strong>: A refund coverage encoded in a service agent could technically interoperate with a associate\u2019s collections agent through A2A, however their enterprise logic could also be diametrically opposed. When one thing goes fallacious, no one owns the end-to-end conduct.<\/p>\n

Context oversharing<\/strong>: A crew may develop an ACP schema to incorporate \u201cPerson Sentiment\u201c for higher personalization, unaware that this knowledge now propagates to each downstream third-party agent within the chain. What began as native enrichment turns into distributed publicity.<\/p>\n

The determinism lure<\/strong>: Not like REST APIs, brokers are nondeterministic. An agent\u2019s refund coverage logic may change when its underlying mannequin is up to date from GPT-4 to GPT-4.5, regardless that the A2A Agent Card declares equivalent capabilities. The workflow \u201cworks\u201c\u2014till it doesn\u2019t, and there\u2019s no model hint to debug. This creates what I name \u201cghost breaks\u201c: failures that don\u2019t present up in conventional observability as a result of the interface contract appears unchanged.<\/p>\n

Taken collectively, these aren\u2019t edge instances. They\u2019re what occurs once we give brokers extra autonomy with out upgrading the principles of engagement between them. These failure modes have a typical root trigger: The technical functionality to collaborate throughout brokers has outrun the group\u2019s capability to say the place that collaboration is suitable, and underneath what constraints.<\/p>\n

That\u2019s why we want one thing on high of the protocols themselves: an specific \u201cAgent Treaty\u201c layer. If the protocol is the language, the treaty is the structure. Governance should transfer from \u201caspect documentation\u201c to \u201ccoverage as code.\u201c<\/p>\n

\n

Need Radar delivered straight to your inbox? Be a part of us on Substack.\u00a0Sign up here<\/a>.<\/em><\/p>\n<\/blockquote>\n

Conventional governance treats coverage violations as failures to forestall. An antifragile strategy treats them as indicators to use. When an agent makes a dedication that violates a enterprise constraint, the system ought to seize that occasion, hint the causal chain, and feed it again into each the agent\u2019s coaching and the treaty ruleset. Over time, the governance layer will get smarter, not simply stricter.<\/p>\n

Outline treaty-level constraints<\/strong>: Don\u2019t simply authorize a connection; authorize a scope. Which ACP fields is an agent allowed to share? Which A2A operations are \u201clearn solely\u201c versus \u201clegally binding\u201c? Which classes of choices require human escalation?<\/p>\n

Model the conduct, not simply the schema<\/strong>: Deal with Agent Playing cards as first-class product surfaces. If the underlying mannequin modifications, the model should bump, triggering a rereview of the treaty. This isn’t bureaucratic overhead\u2014it\u2019s the one option to keep accountability in a system the place autonomous brokers make commitments on behalf of your group.<\/p>\n

Cross-organizational traceability<\/strong>: We’d like observability traces that don\u2019t simply present latency however present intent: Which agent made this dedication, underneath which coverage? And who’s the human proprietor? That is significantly important when workflows span organizational boundaries and associate ecosystems.<\/p>\n

Designing that treaty layer isn\u2019t only a tooling downside. It modifications who must be within the room and the way they give thought to the system. The toughest constraint isn\u2019t the code; it\u2019s the folks. We\u2019re coming into a world the place engineers should purpose about multi-agent sport idea and coverage interactions, not simply SDK integration. Danger groups should audit \u201cmachine-to-machine commitments\u201c that will by no means be rendered in human language. Product managers should personal agent ecosystems the place a change in a single agent\u2019s reward perform or context schema shifts conduct throughout a complete associate community. Compliance and audit features want new instruments and psychological fashions to assessment autonomous workflows that execute at machine velocity. In lots of organizations, these abilities sit in numerous silos, and A2A\/ACP adoption is continuing sooner than the cross-functional constructions wanted to handle them.<\/p>\n

All of this may sound summary till you take a look at the place enterprises are of their adoption curve. Three converging traits are making this pressing: Protocol maturity means A2A, ACP, and MCP specs have stabilized sufficient that enterprises are transferring past pilots to manufacturing deployments. Multi-agent orchestration is shifting from single brokers to agent ecosystems and workflows that span groups, departments, and organizations. And silent autonomy is blurring the road between \u201cdevice help\u201c and \u201cautonomous decision-making\u201c\u2014typically with out specific organizational acknowledgment. We\u2019re transferring from integration (making issues discuss) to orchestration (making issues act), however our monitoring instruments nonetheless solely measure the discuss. The following 18 months will decide whether or not enterprises get forward of this or we see a wave of high-profile failures that drive retroactive governance.<\/p>\n

The chance will not be that A2A and ACP are unsafe; it\u2019s that they’re too efficient<\/em>. For groups piloting these protocols, cease specializing in the \u201ccompletely satisfied path\u201c of connectivity. As an alternative, choose one multi-agent workflow and instrument it as a important product:<\/p>\n

Map the context movement<\/strong>: Each ACP area should have a \u201cfunction limitation\u201c tag. Doc which brokers see which fields, and which enterprise or regulatory necessities justify that visibility. This isn\u2019t a list train; it\u2019s a option to floor hidden knowledge dependencies.<\/p>\n

Audit the commitments<\/strong>: Determine each A2A interplay that represents a monetary or authorized dedication\u2014particularly ones that don\u2019t route by way of human approval. Ask, \u201cIf this agent\u2019s conduct modified in a single day, who would discover? Who’s accountable?\u201c<\/p>\n

Code the treaty<\/strong>: Prototype a \u201cgatekeeper\u201c agent that enforces enterprise constraints on high of the uncooked protocol visitors. This isn\u2019t about blocking brokers; it\u2019s about making coverage seen and enforceable at runtime. Begin minimal: One coverage, one workflow, one success metric.<\/p>\n

Instrument for studying<\/strong>: Seize which brokers collaborate, which insurance policies they invoke, and which contexts they share. Deal with this as telemetry, not simply audit logs. Feed patterns again into governance critiques quarterly.<\/p>\n

If this works, you now have a repeatable sample for scaling agent deployments with out sacrificing accountability. If it breaks, you\u2019ve realized one thing important about your structure earlier than<\/em> it breaks in manufacturing. If you will get one workflow to behave this fashion\u2014ruled, observable, and learn-as-you-go\u2014you may have a template for the remainder of your agent ecosystem.<\/p>\n

If the final decade was about treating APIs as merchandise, the following one will likely be about treating autonomous workflows as insurance policies encoded in visitors between brokers. The protocols are prepared. Your org chart will not be. The bridge between the 2 is the Agent Treaty\u2014begin constructing it earlier than your brokers begin signing offers with out you. The excellent news: You don\u2019t want to revamp your total group. You have to add one important layer\u2014the Agent Treaty\u2014that makes coverage machine-enforceable, observable, and learnable. You want engineers who take into consideration composition and sport idea, not simply connection. And it’s good to deal with agent deployments as merchandise, not infrastructure.<\/p>\n

The earlier you begin, the earlier that governance hole closes.<\/p>\n<\/div>\n