7.1 Mutual Authentication

Description

Agent-to-agent communication MUST use mutual authentication.

Rationale

Without mutual authentication, agents can be impersonated.

Audit Procedure

1. Identify all A2A communication channels
2. Check for identity verification on both ends
3. Verify certificates are validated

Remediation

1. Implement mTLS
2. Use agent identity certificates
3. Validate against registry

Framework Mappings