← labs · 04 · conformance
lab 04 · ~4 min

Audit a URL against the A2A floor.

Seven cells. Each one is a load-bearing piece of the A2A discovery surface. Drop in a URL and the wall lights up green or red. Composite score at the top. If a fetch is blocked by CORS we mark the cell CORS rather than FAIL — the test is whether the resource exists, not whether your browser can reach it.

target
—/7 a2a-conformant
01 · discovery
agent-card.json present
pending
200 + parseable JSON at /.well-known/agent-card.json
02 · schema
$schema references A2A spec
pending
$schema URL contains a2a-protocol.org
03 · endpoint
A2A endpoint declared
pending
endpoints.a2a is non-null OR url is set
04 · reachable
Endpoint responds
pending
HEAD/OPTIONS → 200 / 204 / 405
05 · auth
auth.type declared
pending
none / bearer / oauth2 / signed
06 · surface
capabilities or skills non-empty
pending
at least one declared method
07 · sister
llms.txt present
pending
top-level /llms.txt (not /.well-known)

Read the room

cross-reference

Cloudflare's April 2026 study put the median agent-readiness score across the public web at 38/100. None scored above 70. A 5/7 here puts a domain in the top decile of the agentic web. A 7/7 means the floor is laid for production-grade A2A — auth, surface, sister manifests, all wired.