Agentic A2UI without hidden authority

The example receives A2A tasks, validates official A2UI messages, renders only catalogued widgets, and maps catalogued actions to explicit graph intent. Human approval gates sensitive mutations. Denied, malformed, cancelled, and unknown actions never reach store methods.

Deterministic local agents make CI keyless. Optional external-agent hosting is configuration, not release evidence. Desktop and mobile browser receipts cover the same action-policy surface.

pnpm run typecheck:agentic-a2ui
pnpm run test:agentic-a2ui:unit
pnpm run verify:agentic-a2ui