Federation and trust

agents-host units do not share a global queue. Each is sovereign. Work that crosses the boundary travels in an envelope: origin, destination, budget, policy, audit trail.

Those envelopes are structured and audited. They are not cryptographically signed. Calling them “signed” here would adopt a standard name that is not met.

Trust policies

Who may delegate to whom is declared in the institution spec (trust_to per department) and materialized as policies between hosts. Topologies: flat, hierarchical, hub-spoke. [V]

A2A

The agent-to-agent protocol (A2A) is on in the runtime and has been tested with negative controls. That is interoperability between agents; SiS federation is the piece between institutions. They coexist; they do not replace each other.

What is missing for the X-Road name

Mutual mTLS, certificates per member, a signed and distributed global configuration, trust anchors with P/E/G semantics. Today there is a functional analogue. [P]