{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2025:CI3KRNGT2FVY5HJEIRVYHTXMR7","short_pith_number":"pith:CI3KRNGT","schema_version":"1.0","canonical_sha256":"1236a8b4d3d16b8e9d24446b83ceec8ff6de2e53ba41b346592404b5c2a42a81","source":{"kind":"arxiv","id":"2505.12490","version":3},"attestation_state":"computed","paper":{"title":"Improving Google A2A Protocol: Protecting Sensitive Data and Mitigating Unintended Harms in Multi-Agent Systems","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Amit Dvir, Ariel Stulman, Yedidel Louck","submitted_at":"2025-05-18T16:25:21Z","abstract_excerpt":"Googles A2A protocol provides a secure communication framework for AI agents but demonstrates critical limitations when handling highly sensitive information such as payment credentials and identity documents. These gaps increase the risk of unintended harms, including unauthorized disclosure, privilege escalation, and misuse of private data in generative multi-agent environments. In this paper, we identify key weaknesses of A2A: insufficient token lifetime control, lack of strong customer authentication, overbroad access scopes, and missing consent flows. We propose protocol-level enhancement"},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"2505.12490","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-05-18T16:25:21Z","cross_cats_sorted":[],"title_canon_sha256":"81eb4cf064c809dc01e549a05c9e8846593aa653e72b68baf5059436163a74d1","abstract_canon_sha256":"761dcb5181682f145c9b1b7f36944fb33f1b2e66153638b31946b09068e18fa9"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T12:01:22.836093Z","signature_b64":"Q0bbFlMdUCAkFp+kvCr7RZlH5RMUdO3z3xW+6B1tb1OsVG1J/i+jTwk0JhCNoDroChF6a1Y7/Moo50ZGyL3QAQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"1236a8b4d3d16b8e9d24446b83ceec8ff6de2e53ba41b346592404b5c2a42a81","last_reissued_at":"2026-07-05T12:01:22.835448Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T12:01:22.835448Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"Improving Google A2A Protocol: Protecting Sensitive Data and Mitigating Unintended Harms in Multi-Agent Systems","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Amit Dvir, Ariel Stulman, Yedidel Louck","submitted_at":"2025-05-18T16:25:21Z","abstract_excerpt":"Googles A2A protocol provides a secure communication framework for AI agents but demonstrates critical limitations when handling highly sensitive information such as payment credentials and identity documents. These gaps increase the risk of unintended harms, including unauthorized disclosure, privilege escalation, and misuse of private data in generative multi-agent environments. In this paper, we identify key weaknesses of A2A: insufficient token lifetime control, lack of strong customer authentication, overbroad access scopes, and missing consent flows. We propose protocol-level enhancement"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.12490","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2505.12490/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"2505.12490","created_at":"2026-07-05T12:01:22.835534+00:00"},{"alias_kind":"arxiv_version","alias_value":"2505.12490v3","created_at":"2026-07-05T12:01:22.835534+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.12490","created_at":"2026-07-05T12:01:22.835534+00:00"},{"alias_kind":"pith_short_12","alias_value":"CI3KRNGT2FVY","created_at":"2026-07-05T12:01:22.835534+00:00"},{"alias_kind":"pith_short_16","alias_value":"CI3KRNGT2FVY5HJE","created_at":"2026-07-05T12:01:22.835534+00:00"},{"alias_kind":"pith_short_8","alias_value":"CI3KRNGT","created_at":"2026-07-05T12:01:22.835534+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":6,"internal_anchor_count":0,"sample":[{"citing_arxiv_id":"2606.07150","citing_title":"From Privacy to Workflow Integrity: Communication-Graph Metadata in Autonomous Agent Interoperability","ref_index":22,"is_internal_anchor":false},{"citing_arxiv_id":"2605.06933","citing_title":"MAGIQ: A Post-Quantum Multi-Agentic AI Governance System with Provable Security","ref_index":40,"is_internal_anchor":false},{"citing_arxiv_id":"2602.11327","citing_title":"Security Threat Modeling for Emerging AI-Agent Protocols: A Comparative Analysis of MCP, A2A, Agora, and ANP","ref_index":27,"is_internal_anchor":false},{"citing_arxiv_id":"2605.12364","citing_title":"Attacks and Mitigations for Distributed Governance of Agentic AI under Byzantine Adversaries","ref_index":18,"is_internal_anchor":false},{"citing_arxiv_id":"2605.08460","citing_title":"When Child Inherits: Modeling and Exploiting Subagent Spawn in Multi-Agent Networks","ref_index":12,"is_internal_anchor":false},{"citing_arxiv_id":"2605.06933","citing_title":"MAGIQ: A Post-Quantum Multi-Agentic AI Governance System with Provable Security","ref_index":40,"is_internal_anchor":false}]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/CI3KRNGT2FVY5HJEIRVYHTXMR7","json":"https://pith.science/pith/CI3KRNGT2FVY5HJEIRVYHTXMR7.json","graph_json":"https://pith.science/api/pith-number/CI3KRNGT2FVY5HJEIRVYHTXMR7/graph.json","events_json":"https://pith.science/api/pith-number/CI3KRNGT2FVY5HJEIRVYHTXMR7/events.json","paper":"https://pith.science/paper/CI3KRNGT"},"agent_actions":{"view_html":"https://pith.science/pith/CI3KRNGT2FVY5HJEIRVYHTXMR7","download_json":"https://pith.science/pith/CI3KRNGT2FVY5HJEIRVYHTXMR7.json","view_paper":"https://pith.science/paper/CI3KRNGT","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=2505.12490&json=true","fetch_graph":"https://pith.science/api/pith-number/CI3KRNGT2FVY5HJEIRVYHTXMR7/graph.json","fetch_events":"https://pith.science/api/pith-number/CI3KRNGT2FVY5HJEIRVYHTXMR7/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/CI3KRNGT2FVY5HJEIRVYHTXMR7/action/timestamp_anchor","attest_storage":"https://pith.science/pith/CI3KRNGT2FVY5HJEIRVYHTXMR7/action/storage_attestation","attest_author":"https://pith.science/pith/CI3KRNGT2FVY5HJEIRVYHTXMR7/action/author_attestation","sign_citation":"https://pith.science/pith/CI3KRNGT2FVY5HJEIRVYHTXMR7/action/citation_signature","submit_replication":"https://pith.science/pith/CI3KRNGT2FVY5HJEIRVYHTXMR7/action/replication_record"}},"created_at":"2026-07-05T12:01:22.835534+00:00","updated_at":"2026-07-05T12:01:22.835534+00:00"}