A2A Agent-Card Trust-Chain Validator

The horizontal (agent↔agent) trust complement to the vertical payments chain. Validate an A2A v1.0 agent-card.json — discovered at /.well-known/agent-card.json — then walk the delegated-authority trust chain into KYA-OS attestation and a spend-policy summary. Checks card schema, signature / verification-method block, extension URIs, and every delegation hop for no scope escalation, validity windows, expiry, and spend caps. Issues one PASS / WARN / FAIL trust determination plus a single OpenChainGraph execution_hash receipt (chain_depth: 0 — this node is a chain root). Client-side. Zero PII. Educational / simulation.

OpenChainGraph §5/§6 Chain Root · Depth 0 A2A v1.0 · Linux Foundation Delegated Authority KYA-OS / Spend Policy Zero PII compliance_mandate

↓ ART-04 Identity Attestation ↓ ART-02 Spend Policy ↓ PTG-01 Prompt Template

🔒 All validation runs entirely in your browser (connect-src 'none' — zero network calls). Do not paste live agent signing keys, production credentials, or customer PII. Use synthetic / test agent cards and delegation fixtures only. Structure checks only — no cryptographic signature verification (verify against the publishing domain's key out of band).

Stage 1 — A2A v1.0 Agent Card (required)

agent-card.json

A2A v1.0 card served at /.well-known/agent-card.json. Required keys: name, url, version, protocolVersion, capabilities, skills[]. A signatures[] JWS array or verification method is recommended.

Stage 2 — Delegated-Authority Trust Chain (optional)

Delegation links (ordered root → leaf)

JSON array. Each link: { issuer, subject, scope: ["..."], valid_days }. Trust rules: depth ≤ 4 hops · every child scope ⊆ parent scope (no escalation) · every valid_days ≤ 90 · no expired (valid_days ≤ 0) links.

Stage 3 — Spend-Policy Summary (optional)

Spend caps

JSON: { per_tx_cap, daily_cap } in a single currency. Both should be present, numeric, and positive. daily_cap should be ≥ per_tx_cap.

Trust Determination

Delegated-Authority Chain Map

Trust Checks

OpenChainGraph Artifact · execution_hash

SHA-256: —

Computed client-side via WebCrypto SHA-256 over cgCanon({policy_parameters, output_payload}). Chain root — parent_hashes: none · chain_depth: 0. Feeds ART-04, ART-02, PTG-01.

Spec References

[1] A2A protocol (Agent2Agent, Linux Foundation) — agent-card.json shape, Signed Agent Cards, capabilities.extensions. a2a-protocol.org
[2] Delegation-chain trust thresholds (depth ≤ 4, no scope escalation, validity ≤ 90 days) are this tool's illustrative defaults — tune to your KYA-OS / agent-governance policy.
[3] Downstream: ART-04 Identity Attestation · ART-02 Spend Policy · PTG-01.

Ask your agent

Copy this paragraph into Claude, OpenClaw, or any MCP-aware agent to run this exact tool, with this sample, and verify the artifact.

Run the AINumbers MCP tool `validate_a2a_trust_chain`. Task: Validate an A2A v1.0 agent-card.json then assesses the delegated-authority trust chain into KYA-OS attestation and spend policy.
Call it with arguments: {"policy_parameters":{"agent_card":{"name":"Test Agent","url":"https://agent.example.com","version":"1.0","protocolVersion":"1.0","capabilities":{"streaming":false},"skills":[{"id":"pay","name":"Payment"}],"signatures":[{"protected":"eyJhbGciOiJFZERTQSJ9","signature":"abc123"}]},"delegation_chain":[],"spend_policy":{"per_tx_cap":100,"daily_cap":1000}}}
Verify before trusting: call `verify_execution_hash` on mcp.ainumbers.co (https://mcp.ainumbers.co/mcp) with the parameter `claimed_hash` set to the returned `execution_hash`, passing the full artifact the run returned (the object containing `policy_parameters` + `output_payload` + `execution_hash`; equivalently `policy_parameters` + `output_payload` with `claimed_hash`), not the bare hash string, or re-run the in-page WebMCP tool `validate_a2a_trust_chain`.
Return the ledger link https://ledger.ainumbers.co/ so a human can re-verify without contacting us.
PII rule: All inputs are processed locally in your browser. No data is transmitted. Do not enter real personal data — use synthetic or anonymised inputs only.
Open the tool with the sample prefilled: https://ainumbers.co/chaingraph/art-32-a2a-agent-card-trust-chain-validator.html#p=v1.H4sIAAAAAAAA_wFMAbP-eyJhZ2VudF9jYXJkIjp7Im5hbWUiOiJUZXN0IEFnZW50IiwidXJsIjoiaHR0cHM6Ly9hZ2VudC5leGFtcGxlLmNvbSIsInZlcnNpb24iOiIxLjAiLCJwcm90b2NvbFZlcnNpb24iOiIxLjAiLCJjYXBhYmlsaXRpZXMiOnsic3RyZWFtaW5nIjpmYWxzZX0sInNraWxscyI6W3siaWQiOiJwYXkiLCJuYW1lIjoiUGF5bWVudCJ9XSwic2lnbmF0dXJlcyI6W3sicHJvdGVjdGVkIjoiZXlKaGJHY2lPaUpGWkVSVFFTSjkiLCJzaWduYXR1cmUiOiJhYmMxMjMifV19LCJkZWxlZ2F0aW9uX2NoYWluIjpbXSwic3BlbmRfcG9saWN5Ijp7InBlcl90eF9jYXAiOjEwMCwiZGFpbHlfY2FwIjoxMDAwfX2VgmOuTAEAAA