Back to demos
Flagship · reference implementation

Governed Agent Platform

One task, end to end, on real protocol endpoints: discover an A2A v1.0 agent, authenticate, delegate a payment-exception review, enforce per-tool policy at a gateway, pause for human approval, withhold poisoned data, trace every call — then gate a release on trajectory evaluation.

Northwind Finance and every vendor, invoice, and amount are fictional. The agent is deterministic (no model calls), so each run is reproducible. No money moves.

1

Discover — A2A Agent Card

2

Identify — delegated credential

Reads run on your delegated credential. Releasing a payment runs under the agent's own service identity, and the gateway additionally requires a recorded approval.

3

Delegate — A2A task through the tool gateway

Get a credential in step 2 first — or send without one to see AUTH_REQUIRED.

4

Evaluate & release — trajectory eval gates a canary

A candidate revision (v2) skips the duplicate-payment check to save latency. Before it gets more than a 10% canary, both revisions run against golden scenarios and are scored on the tools they called and the decisions they made.

Connect your own agent

  • A2A: card at /.well-known/agent-card.json, JSON-RPC at /api/a2a (send A2A-Version: 1.0).
  • MCP: Streamable HTTP server at https://www.prasadkavuri.com/api/mcp (official SDK, protocol 2025-11-25). Add it as a remote MCP server in any MCP client.
  • Credentials: auth.md issues Bearer tokens with read:profile and finance:sandbox.