Inside a2a-acl — a drop-in Express library for agent-to-agent authorization

A few days ago I wrote about the per-tool ACL design that fronts every inbound A2A call to an ownify...