QWED-AI/qwed-a2a

A2Acommunity
QWED-AIApache-2.0Updated 1mo agoGitHub

Fail-closed Agent-to-Agent verification, provenance, and attestation infrastructure for AI systems.

Zero-Trust Verification Interceptor for Agent-to-Agent Communication QWED A2A intercepts every payload between autonomous agents, runs deterministic verification, and either forwards or blocks the message — with a signed JWT attestation proving the decision. Agents don't trust each other. QWED verifies for them. 📖 Full Documentation QWED A2A is a verification interceptor for Google's…

Automatically indexed from public sources. Not yet verified by the developer on Forge.Claim this listing →
2Forks
1mo agoLast update
Package
AuthorQWED-AI
LicenseApache-2.0
Sourcegithub
Trust Status
B
60/100Good
Listed in Forge index+10/10
Publisher identity verified+0/25
Publisher: run `forge publish` from the package repo to claim ownership
Ed25519 publish signature+0/10
Included automatically when the publisher runs `forge publish`
Domain verification+0/5
Publisher: host /.well-known/forge.json on the package homepage with { "publisher": "<github-login>" }
CVE scan · not run+0/30
Not yet scanned — package must be on npm
Static analysis · clean+20/20
npm provenance (Sigstore)+0/5
Publish from GitHub Actions with the --provenance flag
Paste into Claude Code, Cursor, or any AI assistant to fix all gaps
StatusCommunity-indexed
PublisherUnverified
SignatureUnsigned
Domain
Provenance
DependenciesNot audited
Tool surface
Security scan✓ CleanvHEAD · 19d ago
EvalsNone
IndexedJun 13, 2026

Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts — it cannot prove the absence of malicious code.

About

Zero-Trust Verification Interceptor for Agent-to-Agent Communication QWED A2A intercepts every payload between autonomous agents, runs deterministic verification, and either forwards or blocks the message — with a signed JWT attestation proving the decision. Agents don't trust each other. QWED verifies for them. 📖 Full Documentation QWED A2A is a verification interceptor for Google's Agent-to-Agent (A2A) protocol. It sits between autonomous agents and verifies every inter-agent payload before…

Keywords
a2aagent-securityagentic-aiai-agentsattestationcryptographyfail-closedfastapigoogle-a2ainterceptorjwtllm-securitymiddlewaremulti-agentpythonqwedqwed-aitrust-boundaryverificationzero-trust