Research & insights

The public record.

Research, code, and protocol contributions from the practice, published where anyone can check them.

Paper
arXiv 2606.07150 · cs.CR · June 2026

From Privacy to Workflow Integrity: Communication-Graph Metadata in Autonomous Agent Interoperability

Analyzes the metadata surface of agent interoperability protocols, including A2A and MCP, and shows that workflow structure leaks even when payloads are encrypted: a classifier recovers task class from communication-graph metadata alone at roughly six times chance. For an enterprise, that means an observer can learn what your agents are doing without reading a single message. This is the class of risk we design client systems against.

Read on arXiv
Open source
TypeScript · OpenClaw · SimpleX

openclaw-simplex

A SimpleX Chat channel plugin for OpenClaw giving agents end-to-end encrypted messaging with contact allowlists, explicit pairing approval, and a documented security review. Running code, not a position paper: the same patterns we apply to securing agent traffic in client systems.

View on GitHub
Protocol
A2A #1964 · open proposal

Metadata-private custom binding for A2A

An open proposal to the A2A protocol for a binding that hides who talks to whom: Oblivious HTTP (RFC 9458) relays, constant-rate polling, and anonymous per-interaction tokens. Ships a specification, a reference implementation, and an evaluation dataset. Standards work that keeps client systems ahead of where the protocols are going.

Read the proposal
Notes from ongoing work land here as they clear review

Start with a conversation.

Book a discovery call