Lab · Workflows · Open-internet agents

Open-internet agents

A shopping agent at did:wba:shop.example has never met Halden. ANP carries discovery and identity: it reads Halden's agent description, resolves did:wba:halden.example and checks the description's proof. The description lists an A2A interface, so A2A carries the work: the order is an A2A task that pauses (INPUT_REQUIRED) for the customer's approval and ends with an order artifact. Every A2A call is signed with the shopping agent's did:wba key (RFC 9421), and Halden checks it before the A2A SDK sees the request. Real: WebCrypto keys, signatures and proofs, the official A2A SDK, LangChain agents. Simulated: the domains, the catalog and, unless you connect a model, the agents' decisions; Halden's A2A answers are not signed here. Turn on Intercept to tamper across the seam.