惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

V
Vulnerabilities – Threatpost
T
The Blog of Author Tim Ferriss
S
SegmentFault 最新的问题
D
DataBreaches.Net
博客园_首页
罗磊的独立博客
B
Blog
T
Threat Research - Cisco Blogs
C
Cisco Blogs
GbyAI
GbyAI
Engineering at Meta
Engineering at Meta
WordPress大学
WordPress大学
G
GRAHAM CLULEY
H
Help Net Security
酷 壳 – CoolShell
酷 壳 – CoolShell
Cyber Security Advisories - MS-ISAC
Cyber Security Advisories - MS-ISAC
爱范儿
爱范儿
SecWiki News
SecWiki News
T
Threatpost
钛媒体:引领未来商业与生活新知
钛媒体:引领未来商业与生活新知
Schneier on Security
Schneier on Security
T
The Exploit Database - CXSecurity.com
Google Online Security Blog
Google Online Security Blog
T
Tor Project blog
小众软件
小众软件
让小产品的独立变现更简单 - ezindie.com
让小产品的独立变现更简单 - ezindie.com
Y
Y Combinator Blog
H
Hacker News: Front Page
V
V2EX
Security Latest
Security Latest
Cloudbric
Cloudbric
Simon Willison's Weblog
Simon Willison's Weblog
Attack and Defense Labs
Attack and Defense Labs
D
Darknet – Hacking Tools, Hacker News & Cyber Security
P
Proofpoint News Feed
博客园 - 三生石上(FineUI控件)
NISL@THU
NISL@THU
S
Secure Thoughts
Blog — PlanetScale
Blog — PlanetScale
博客园 - 司徒正美
V2EX - 技术
V2EX - 技术
Vercel News
Vercel News
P
Palo Alto Networks Blog
IT之家
IT之家
MyScale Blog
MyScale Blog
有赞技术团队
有赞技术团队
Application and Cybersecurity Blog
Application and Cybersecurity Blog
D
Docker
Google DeepMind News
Google DeepMind News
Webroot Blog
Webroot Blog

DEV Community

Authentication Security Deep Dive: From Brute Force to Salted Hashing (With Java Examples) Why AI Systems Don’t Fail — They Drift Spilling beans for how i learn for exam😁"Reinforcement Learning Cheat Sheet" I Replaced Chrome with Safari for AI Browser Automation. Here's What Broke (and What Finally Worked) How Python Borrows Other People's Work The $40 Architecture: Processing 1 Billion API Requests with 99.99% Uptime Vibe Coding: A Workflow Guide (From Zero to SaaS) Most webhook security guides protect the wrong side. The scary part is delivery. Headless CMS for TanStack Start: Build a Blog with Cosmic EU Age Verification App "Hacked in 2 Minutes" — What Actually Happened Comfy Cloud’s delete function does not actually remove files Running AI Models on GPU Cloud Servers: A Beginner Guide Event-driven media intelligence with AWS Step Functions and Bedrock I scored 500 AI prompts across 8 quality dimensions — here's what broke How to Call Google Gemini API from Next.js (Free Tier, No Backend Needed) The Portal Protocol: Reclaiming Human Connection in the Age of AI How to Fix Your Team's Scattered Knowledge Problem With a Self-Hosted Forum Intro to tc Cloud Functors: A Graph-First Mental Model for the Modern Cloud Designing Multi-Tenant Backends With Both Ownership and Team Access I Built a Neumorphic CSS Library with 77+ Components — Here's What I Learned PostgreSQL Performance Optimization: Why Connection Pooling Is Critical at Scale Cómo construí un SaaS multi-rubro para gestionar expensas en Argentina con FastAPI + Vue 3 🚀 I Built an Ethical Hacking Scanner Tool – Open Source Project I Replaced /usage and /context in Claude Code With a Single Statusline A Pythonic Way to Handle Emails (IMAP/SMTP) with Auto-Discovery and AI-Ready Design I Collected 8.9 Million Polymarket Price Points — Here's What I Found About How Markets Really Move EcoTrack AI — Carbon Footprint Tracker & Dashboard Everyone's Using AI. No One Agrees How. 5 self-hosted ebook managers worth trying in 2026 Building Your First AI Agent with LangChain: From Chatbot to Autonomous Assistant Common SOC 2 Failures (Real World) Stop Vibe-Checking Your AI App: A Practical Guide to Evals How to Use SonarQube and SonarScanner Locally to Level Up Your Code Quality Your Next To-Do App Is Dead — I Replaced Mine with an OpenClaw AI Sign a Nostr event in 60 lines of Python using coincurve — no nostr-sdk, no nbxplorer, no rust toolchain ITGC Audit Explained Like You’re in Big 4 Patch Tuesday abril 2026: Microsoft parcha 163 vulnerabilidades y un zero-day en SharePoint Stop scraping everything: a better way to track competitor price changes Listing on MCPize + the Official MCP Registry while routing payments OUTSIDE the marketplace — how I kept 100% of my x402 revenue Building an AI-Powered Risk Intelligence System Using Serverless Architecture Why We Ripped Function Overloading Out of Our AI Toolchain Testing AI-Generated Code: How to Actually Know If It Works SaaS Churn Is Killing Your Business. Here Is What to Do About It (Without a Support Team) The Speed of AI Is No Longer Linear - And Self-Improving Models Are Why How to Implement RBAC for MCP Tools: A Practical Guide for Engineering Teams From Standard Quote to Persuasive Proposal: AI Automation for Arborists I built a CLI that scaffolds complete multi-tenant SaaS apps Axios CVE-2025–62718: The Silent SSRF Bug That Could Be Hiding in Your Node.js App Right Now The dashboard that ended our friendship Data Pipelines Explained Simply (and How to Build Them with Python) The Hidden Cost of AI Systems Nobody Talks About. undefined vs undeclared, and how typeof behaves Switching from file-based jobs to NATS/Kafka in Rust without changing code io_uring Adventures: Rust Servers That Love Syscalls Why Agentic AI is Killing the Traditional Database The POUR principles of web accessibility for developers and designers Quantum Neural Network 3D — A Deep Dive into Interactive WebGL Visualization How To Install Caveman In Codex On macOS And Windows Automation Pipeline Reliability: Why Your Workflow Breaks When Nobody Is Watching I Built an 'Open World' AI Coding Agent — It Works From ANY Folder From Freelancing to Product: A Tech Service Company's SaaS Transformation China's AI Giants: Adding Tencent Hunyuan & ByteDance Doubao to AI University (74 Providers) On the Vibe Coders and Their Lies clerk: Auto-Summarize Your Claude Code Sessions AI Weekly — 2026/04/10–04/17 | The Model Lockdown Is Here, but the Toolchain Is the Real Battleground AI 週報 — 2026/04/10–2026/04/17 模型封鎖潮來了,但工具鏈才是真戰場 Maybe this is how Open-Source apps are born... 🚀 Fine-Tune LLMs with LoRA and QLoRA: 2026 Guide tRPC v11 + Next.js App Router: End-to-End Type Safety Without the Boilerplate ShadCN UI in 2026: Why I Stopped Installing Component Libraries and Started Owning My Components SaaS Billing in React Server Components: Stripe + Supabase Without a Single `useEffect` Join our DEV Weekend Challenge — $1,000 in Prizes Across TEN winners! Submissions Due April 20 at 6:59 AM UTC. Implementing FSRS Spaced Repetition in Flutter + Supabase — Adding Memory Science to an AI Learning App "I Texted My Localhost From the Train — Claude Code Fixed the Bug Before I Got Home" I Built a Sales Prep AI and It Went Deeper Than Expected Design to Code #2: One JSON, Eleven Outputs Solving the 100M-Row Problem: A Summary Table Pattern for High-Volume Push Notification Logs Flutter Web With Wasm: What Actually Changes For Developers I Built 50 Royalty-Free Soundtracks for My Side Project in a Weekend Using AI Music Generation The Vibe Coding Security Checklist: 7 Things to Check Before You Ship Stop Letting Googlebot Guess Fix Your React App's SEO Right Desconstruindo o Streaming do LinkedIn: Como Criar um Engine de Extração de Vídeo de Alta Performance com HLS e FFmpeg (EDA Part-1) EDA (Exploratory Data Analysis) Explained With Real Life — Why Looking at Your Data Is the Most Important Step in Machine Learning Brand Relationship Management at Scale: Our 4-Touch Outreach System for 200+ Brands Why String.fromEnvironment() Might Return an Empty String in Dart JGuardrails 1.0.0 — Hardening Java LLM Apps Against Jailbreaks, Toxicity, and Prompt Injection Plan and Schedule a Full Week of Threads Content From One Claude Conversation Coding Cat Oran Ep3, Five Tables Changed Everything Updated: BFF Pattern I'm done watching freelancers get buried by 200 proposals. So I'm building the alternative. This is my first post BFS Algorithm in Java Step by Step Tutorial with Examples Tracking LLM Pricing Monthly: An Open Dataset for 22 AI Models How We Measure Content ROI on a Comparison Site: Revenue Attribution Without Perfect Data Introducing Nova AI Ops: The AI-Native Operating System for SRE Teams I built a free desktop video downloader for Windows — Grabbit How Talkie OCR Helps Vision-Impaired & Dyslexic Users Read the World Around Them VRCFaceTracking安装和iPhone面捕配置教程,有bug Even CrowdStrike Can't See Your Agents The Automation Gold Rush: What n8n Workflows and Claude Are Opening Up for Developers Right Now
Google Finally Answered the Question Nobody Was Asking Out Loud
Muhammad Asi · 2026-04-27 · via DEV Community

There's a thing that happens at big tech conferences. You sit through an hour of polished demos, applause lines, and customer success stories, and somewhere in the middle of it all, a single slide quietly destroys a problem you'd been working around for months.

That happened to me while watching Google Cloud NEXT '26.

The announcement wasn't the flashiest one. It wasn't the 8th-gen TPUs (though those are genuinely wild). It wasn't Gemini 3.1 Pro. It was something called the Agent2Agent protocol — and if you've spent any time trying to build real multi-agent systems, you probably just sat up a little straighter.


The problem everyone's been ignoring

Let me back up.

For the past year or so, the developer narrative around AI agents has been: "build your agent, make it smart, deploy it." And tools have gotten genuinely good at that part. But there's a messy reality underneath the demos — what happens when your agent needs to talk to another agent?

Not your agent calling a REST API. Not your agent hitting a database. Your agent needing to hand off a task to a completely different agent, built by a different team, running on a different platform, with different internal logic.

Right now, that looks like a lot of custom glue code. HTTP calls with manually agreed-upon schemas. Hoping the other team's agent returns something predictable. Debugging failures that could be anywhere in a chain of three or four systems.

I've been in that situation. It's not fun. And nobody's really been talking about it as a protocol problem — it's been treated as an integration problem you just solve case by case.

Google's answer at NEXT '26: stop solving it case by case.


What A2A actually is

The Agent2Agent (A2A) protocol is an open standard for agent-to-agent communication. The idea is straightforward — give agents a common language for handing off tasks, sharing context, and reporting status, regardless of what platform they're built on.

Here's what struck me about it: A2A isn't a Google-only thing. It's already built into LangGraph, CrewAI, LlamaIndex, Semantic Kernel, and AutoGen. The Agent Development Kit (ADK) hit stable v1.0 across Python, Go, and Java with TypeScript available too. This isn't a vendor lock-in play disguised as an open standard — or at least, it's not only that.

The practical picture they painted: a Salesforce agent built on Agentforce hands off a task to a Google agent on Vertex AI (now "Gemini Enterprise Agent Platform"), which queries a ServiceNow agent for IT asset data — all through A2A, without any of the three systems needing to understand each other's internals. No custom schema negotiation. No fragile adapter layers.

If that actually works as advertised in production, it changes the economics of multi-agent system design pretty dramatically.


The part that's easy to miss

What I think is genuinely underrated in the NEXT '26 announcements is the security layer sitting underneath all of this.

A2A without trust guarantees is just chaos at scale. If agents can call each other freely, you need to know which agent called what, with what permissions, and be able to audit the whole chain.

Google's answer is Agent Identity — every agent gets a unique cryptographic ID. Agent Gateway handles traffic control between agents and data. Model Armor adds runtime protection against prompt injection and tool poisoning.

These aren't afterthoughts bolted on. According to the docs, they're baked into the Agent Platform from the ground up, which means if you build on it, you get that traceability by default rather than having to engineer it yourself.

I'll be honest — I was skeptical when I read "secure-by-design" in the keynote. That phrase gets used a lot. But the architecture around Agent Identity is specific enough that it reads less like marketing and more like a genuine engineering decision. Cryptographic IDs per agent. Audit logging through Cloud IAM. Centralized observability.

Whether it holds up when you actually try to build something complex on it — that's a different question. But the intent is at least coherent.


Let's actually try it — ADK in under 5 minutes

This is where I'll stop summarizing announcements and show you something concrete. If you want to form your own opinion, the fastest way is to run something.

Install the ADK:

pip install google-adk

Enter fullscreen mode Exit fullscreen mode

Here's a minimal multi-agent setup — a coordinator that delegates to two specialized sub-agents. This is the exact pattern A2A is designed to scale across platforms:

from google.adk.agents import LlmAgent

# A specialized agent that only fetches data
data_agent = LlmAgent(
    name="data_fetcher",
    model="gemini-2.5-flash",
    instruction="""You are a data retrieval specialist.
    When given a topic, return a concise structured summary of relevant facts.
    Keep responses under 150 words."""
)

# A specialized agent that only writes summaries
writer_agent = LlmAgent(
    name="report_writer",
    model="gemini-2.5-flash",
    instruction="""You are a technical writer.
    Take raw data points and turn them into a clean, readable paragraph.
    Avoid jargon. Write for a developer audience."""
)

# Coordinator that routes between them
coordinator = LlmAgent(
    name="coordinator",
    model="gemini-2.5-flash",
    description="I coordinate data fetching and report writing tasks.",
    instruction="""You manage a small team of agents.
    For any research request: first delegate to data_fetcher, 
    then pass those results to report_writer for a clean output.
    Do not do either task yourself.""",
    sub_agents=[data_agent, writer_agent]
)

Enter fullscreen mode Exit fullscreen mode

Run it from your terminal:

adk run .

Enter fullscreen mode Exit fullscreen mode

Or spin up the dev UI to see the full agent trace visually:

adk web

Enter fullscreen mode Exit fullscreen mode

The dev UI is actually one of the underrated parts — you get a real-time view of which sub-agent handled what, what it returned, and how long each step took. That kind of observability is what's been missing from most agent frameworks.

What's notable here is that data_agent and writer_agent could each be running on entirely different infrastructure — or even built by different teams using different frameworks — and with A2A, the coordinator would still hand off tasks the same way. That's the point.


What this actually means for developers

Let me be concrete about what changes if A2A gains real adoption:

Building a pipeline of specialized agents becomes viable. Right now, chaining agents usually means one team owns the whole chain. With A2A, you could have a data-fetching agent from one team, a reasoning agent from another, and a summarization agent from a third — all interoperating without a massive integration project.

The ADK is worth actually looking at now. It's model-agnostic, deployable to any container or Kubernetes environment, and optimized for Gemini but not exclusive to it. The v1.0 stable release across multiple languages means this is past the "experimental" phase.

Agent simulation before you ship. The new Agent Simulation tool lets you stress-test agents against real-world scenarios before deployment. I'm more interested in this than most of the headline features because it addresses one of the most painful parts of agent development — you genuinely don't know how your agent behaves until something weird happens in production.


My honest take

Google's keynote framing was "the era of the pilot is over, the era of the agent is here." I think that's a little optimistic. Most teams I know are still figuring out how to make a single reliable agent, let alone orchestrating fleets of them.

But the infrastructure they're building at NEXT '26 — particularly A2A and the identity/governance layer — is the right bet. The bottleneck in multi-agent systems isn't model intelligence anymore. It's interoperability and trust. And those are fundamentally protocol and infrastructure problems.

The Danfoss example they shared (80% of email-based order processing automated, response times cut from 42 hours to near real-time) and Suzano (95% reduction in query time for natural-language SQL) suggest at least some organizations are past the pilot stage. But enterprise manufacturers and large corporates are a different environment than most of us are building in.

The question for the average developer isn't "is Google's agentic vision compelling." It is. The question is whether A2A becomes a genuine standard or a Google-flavored standard that only really works well in Google's ecosystem. That's determined by adoption, not announcement.

Worth watching. Worth experimenting with. The ADK is free to try, Agent Platform gives $300 in credits, and the A2A spec is open.

That's enough to form your own opinion, which is always better than taking mine.


Further reading: