Agent-to-Agent Authorization: What A2A Actually Guarantees (and What It Quietly Hands Back to You)
AAIF just gave MCP and A2A the same governance home. That's a coordination story, not a security fix. Here's what A2A's spec actually guarantees about agent-to-agent authorization, and the three holes you still have to close yourself.