A2A 3 Agent Delegation Chains: The Standard Enforces Only the Last Hop Oct 23, 2026 The Trust Gap: Your Threat Model Stops at the Protocol Boundary Sep 15, 2026 Deleting the Malicious MCP Server Doesn't Save You Jun 17, 2026