What problem does it solve? It prevents confusion between two distinct layers both called "A2A" — the PingOne RFC 8693 nested-act identity chain and the Linux Foundation A2A wire protocol — and enforces correct implementation of agent-to-agent delegation in UC2/UC2.5 use cases. ## Core Features & Use Cases - Dual-layer separation: Distinguishes the PingOne nested-act identity layer from the A2A wire protocol (Agent Card discovery + JSON-RPC SendMessage) so changes never collapse them. - PingOne bearer auth on the A2A hop: Enforces PingOne-issued bearer tokens (never Keycloak, never client_credentials) so the wire hop proves the delegating user via the Exchange #1 delegated token. - Agent Card and JSON-RPC endpoints: Mounts an Agent Card and JSON-RPC handler for every specialist in config/a2aSpecialists.js using the @a2a-js/sdk. - Use Case: When updating UC2 delegation or Learning Hub A2A copy, apply these rules to keep the wire protocol, token chain events, and education panel consistent. ## Quick Start Ask the agent to update the UC2 A2A delegation handoff while keeping the PingOne bearer auth and nested-act token exchange intact.