aip-core v0.3.0 — A2A binding + interactive site

[0.3.0] - 2026-05-08

Added

• New aip_a2a module: AIP binding for the Agent-to-Agent (A2A) protocol.
  • verify_a2a_task() — verify chained tokens carried in A2A task metadata.aip_token
  • append_delegation_block() — extend a chain before forwarding a task
  • A2AVerifyMiddleware — framework-agnostic wrapper for A2A task handlers
  • parse_aip_identity() — extract and validate the aip_identity extension from agent cards
  • A2A-specific error types: AudienceError, ScopeError, ChainError, ExpiryError, DepthError
• Rendered specification at https://sunilprakash.com/aip/spec/.
• Interactive protocol page at https://sunilprakash.com/aip/paper/ (verification flow, chain viewer, attack simulator).

Changed

• agent-identity-protocol package now ships four sub-packages: aip_core, aip_token, aip_mcp, aip_a2a.
• ChainedToken.authorize() now correctly handles delegated tokens with budget constraints (was previously failing on any chained token with budget_cents set on a delegation block) and explicitly enforces scope attenuation across delegation hops.

Notes

• No breaking changes. All aip_core, aip_token, aip_mcp imports continue to work unchanged.