MCP Connects AI Agents to Tools. Who Checks the Evidence Before the Tool Acts?
说明与用途
在使用 A2A 和 MCP 的多代理系统中,证据可能在推理和执行之间变得陈旧。FreshCtx 0.14.0 添加了签名、过期的证据收据,在调用工具前进行验证,若证据过期或不可验证则阻止执行。
问题
AI agents may act on stale or unverifiable evidence when delegating work across agent boundaries before calling tools.
结果
The system prevents tool execution when evidence is stale, missing, expired, tampered, or presented to the wrong recipient, maintaining a consistent evidence‑validity rule across multiple runtimes.
工作流
- Agent A reads evidence
- Agent A forms a decision
- Agent A delegates via A2A to Agent B
- Agent B validates the evidence receipt
- Agent B delegates via A2A to Agent C
- Agent C validates the receipt again
- Agent C calls the MCP tool if receipt is CURRENT; otherwise blocks execution
证据
FreshCtx 0.14.0 carries a signed, expiring, recipient‑bound evidence receipt across A2A delegation.
If a receipt is missing, expired, modified, or presented to the wrong recipient, execution is rejected before the receiving agent runs the protected action.
- 记录日期: 2026-09-12T06:30:52.487Z