A2A Under Air-Gap: Three Attack Vectors and the Private-CA Answer

The three protocol-level attack vectors A2A introduces — session smuggling, Agent Card poisoning, and SSE stream hijacking — and private-CA-signed TLS inside a sovereign VPC as the structural air-gapped mitigation. As of mid-2026, A2A spec v1.0.