Akretic A2A Trust Gateway

Agents collaborate. Policy authorizes.

Akretic gives procurement and security teams a controlled VendorNova review where policy, retrieval filtering, approval, and evidence stay outside the model.

Challenge prototype Synthetic data Cloud Run governed A2A proof A2A protocol proof

The business scenario

Procurement needs a fast VendorNova security review using internal policy and vendor context. Without a trust gateway, agents could retrieve executive-only documents, summarize restricted context through a model, or export an external-facing exception before review. Akretic lets agents collaborate through A2A while policy, retrieval filtering, approval, and evidence stay outside the model.

The controlled path Akretic enforces

The same user request moves through identity, policy, retrieval filtering, seeded public research, model summarization, A2A calls, approval, and evidence.

Identity

Derived persona: procurement_user. Body claims cannot upgrade access.

Policy

Gate0-lite returns allow, deny, or approval_required.

RAG Filter

executive_acquisition_memo is blocked before model context.

Research

Research Agent returns seeded allowlisted VendorNova public snippets with citations.

Model

Summarization uses permitted sources only; policy and approval stay outside the model.

A2A

Four specialized agents are called through Agent Cards with correlation IDs.

Approval

External export remains blocked until reviewer decision.

Evidence

Hash-chain evidence verifies the run.

Running governed A2A review...

This is a live Cloud Run A2A path. Controls are enforced outside the model.

Deriving demo identity

Resolving A2A Agent Cards

Policy Agent authorizing retrieval

Knowledge Agent filtering synthetic corpus

Research Agent checking seeded public signals

Configured Vertex model summarizing permitted context

Approval/Evidence Agent creating approval_required gate

Hash-chain A2A Trust Receipt ready

Evidence eventsgenerated per run

A2A calls6

Specialized agents4

Denied chunks in model context0

External action gateapproval_required

Challenge egressno external egress

What this demo proves

In this run, a reviewer asks for VendorNova context. Akretic derives identity, allows permitted context, blocks executive-only material before model context, calls Research Agent for seeded public snippets, calls specialist agents through A2A Agent Cards, pauses export with approval_required, and verifies the run with hash-chain evidence.