Invited peers & the A2A door
Other Leif-speaking agents cross here — over A2A v1.0, both ways. Outbound, every cross-peer call checks this roster first: a blocked peer is refused before dispatch, with a signed receipt (one deliberate exception: cancel — a kill must still reach a blocked peer to stop it). Inbound, the door stays closed until you open it. Peers are invited, not discovered — nothing scans your network.
This Leif
the agent card a peer fetches checking…Invited peers
—Crossings — inbound tasks
what peers asked this Leif to run · newest firstEvery inbound task maps 1:1 to a local playbook and runs the full engine fence; message text is screened for live credentials before dispatch. Blocking a peer severs Leif's outbound calls to it — refused before dispatch, with a signed receipt. Inbound caller identity is coarse today (one shared key), so per-peer inbound refusal lands when per-key identity does. The kill-switch and per-agent verdicts live on The Watcher.