Skip to content

Sanitize context_update sync: drop reserved ag:/a2a: keys on both legs - #3256

Open
AUTHENSOR wants to merge 1 commit into
ag2ai:mainfrom
AUTHENSOR:fix/sanitize-context-update-sync
Open

AUTHENSOR wants to merge 1 commit into
ag2ai:mainfrom
AUTHENSOR:fix/sanitize-context-update-sync

Conversation

@AUTHENSOR

Copy link
Copy Markdown

Fixes #3255.

3-file patch dropping reserved ag:/a2a: keys from the wire merges (server executor + client sync sites). Applied test flips the zero-prompt execution cells S3/C1 to prompted-and-blocked with the S1/S2 controls intact; 4/4 unit suite. Confirmed by @PushpakAg in the issue thread.

…ag2ai#3255)

The A2A context-variable sync must not carry framework-reserved keys
across the wire. Drops ag:/a2a: prefixed keys on both server and
client merges so a remote peer cannot set the approval_required
allow_always bypass (or any future reserved state) through
context_update metadata.
@AUTHENSOR
AUTHENSOR requested a review from vvlrff as a code owner September 16, 2026 18:37
@CLAassistant

Copy link
Copy Markdown

CLA assistant check
Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.


AUTHENSOR seems not to be a GitHub user. You need a GitHub account to be able to sign the CLA. If you have already a GitHub account, please add the email address used for this commit to your account.
You have signed the CLA already but the status is still pending? Let us recheck it.

@github-actions github-actions Bot added the area:a2a A2A protocol support (ag2/a2a) label Sep 16, 2026
@vvlrff

vvlrff commented Sep 17, 2026

Copy link
Copy Markdown
Collaborator

Hello @AUTHENSOR! Please sign the CLA

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area:a2a A2A protocol support (ag2/a2a)

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Remote callers can silently disable approval_required() through the A2A context-variable sync

3 participants