Tenzro
Agents

A2A v1.0 Signed Agent Cards.

A bare agent card at /.well-known/agent.json can be rewritten by a hostile reverse proxy without detection. The A2A v1.0 SignedAgentCard envelope wraps the card with a JWS signature over the canonical card hash — the production-grade conformance bar in the A2A 2026 spec.
STATUS
Library + canonical-hash RPC live
CRATE
tenzro-node
STABILITY
Stable
REFERENCE
A2A v1.0
01

Wire shape

{
  "agentCard": { ... },
  "signature": "<JWS Flattened JSON Serialization>",
  "algorithm": "EdDSA",
  "issuer": "did:web:tenzro.network"
}
02

Canonical hash

SHA-256 over "tenzro/a2a/signed-agent-card/v1" || sorted-keys canonical-JSON of the card. Producer and verifier hash identically across language implementations.

03

RPC

POST https://rpc.tenzro.network
{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tenzro_signedAgentCardCanonicalHash",
  "params": { ...AgentCard JSON... }
}
Related
← All docs