You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
The A2A live acceptance tests are the Phase-3 rollout gate — they must pass against a deployed, reachable A2A server before A2A is enabled in any environment. Per the platform owner's decision (2026-07-22), these are relocated out of per-PR CI into a dedicated workflow .github/workflows/a2a-acceptance.yml (workflow_dispatch/workflow_call) so they are a real must-run gate rather than a skip-as-success that could hide unverified work.
Per-PR CI keeps the conformance tier only (grades the frozen contract, needs no server).
The gate must verify (all FAIL loudly, no skips, when invoked)
Cross-product acceptance — a requirements agent holding no Atlassian MCP and no Jira skill calls the FuzePlan agent over A2A and Jira tickets result. If the caller needs Jira knowledge, the design has failed.
AuthZ-negative — a caller not in the callee's providesTo is refused by the callee (absent allowlist = DENY), denial non-disclosing.
Backfill providesTo/dependsOn on the caller/callee repos used by the acceptance test (currently present on only 5 of 20 repos; absent = DENY).
Definition of done
a2a-acceptance.yml runs green with a real deployed server; the feature is NOT "done" until this gate is green. Owners: test-engineer (the suite + workflow), devops-engineer (server standup + secrets), platform-governance (providesTo backfill).
Related: contract PR #73 (frozen A2A v1), test PR #89, deploy PR #85, server PR #87, mcp PR #86.
What
The A2A live acceptance tests are the Phase-3 rollout gate — they must pass against a deployed, reachable A2A server before A2A is enabled in any environment. Per the platform owner's decision (2026-07-22), these are relocated out of per-PR CI into a dedicated workflow
.github/workflows/a2a-acceptance.yml(workflow_dispatch/workflow_call) so they are a real must-run gate rather than a skip-as-success that could hide unverified work.Per-PR CI keeps the conformance tier only (grades the frozen contract, needs no server).
The gate must verify (all FAIL loudly, no skips, when invoked)
providesTois refused by the callee (absent allowlist = DENY), denial non-disclosing.always_ask→INPUT_REQUIRED/AUTH_REQUIRED→reach_humanresolves → task completes; caller-scopedListTasks;CancelTask; subscribe-on-terminal error.Wiring required to turn it green (Phase 3, devops-engineer)
a2a-shared(chart from PR feat(a2a): image + Helm chart (enabled-gated) + Argo Application #85) in the acceptance workflow (docker-compose or kind+helm) and exportA2A_SERVER_BASE_URL.A2A_TEST_OIDC_TOKEN(allowlisted caller) +A2A_TEST_UNAUTH_TOKEN(non-allowlisted) as repo secrets (alphanumeric-safe).providesTo/dependsOnon the caller/callee repos used by the acceptance test (currently present on only 5 of 20 repos; absent = DENY).Definition of done
a2a-acceptance.ymlruns green with a real deployed server; the feature is NOT "done" until this gate is green. Owners: test-engineer (the suite + workflow), devops-engineer (server standup + secrets), platform-governance (providesTo backfill).Related: contract PR #73 (frozen A2A v1), test PR #89, deploy PR #85, server PR #87, mcp PR #86.