What Agent-to-Agent Handover Protocol (BPMN 2.0) requires
Enforcing a zero-trust model for state transitions within distributed business processes, the Agent-to-Agent Handover Protocol aligns with NIST SP 800-207's micro-segmentation principles. Secure communication is mandated through a `require_mutual_tls_auth` policy, preventing unauthorized interception. Conforming to IETF RFC 8725 best practices, decentralized authorization is enforced via an `enforce_oauth2_jwt_bearer` mechanism. The protocol upholds the BPMN 2.0 Specification's token execution semantics by ensuring a `bpmn_process_id_required` for every transfer, maintaining process context continuity. State integrity is guaranteed with a `require_state_integrity_hash` validation upon receipt. System security and resilience, as outlined in NIST AI 100-1, are addressed by limiting handover failures to a `max_retries_on_handover_fail` of 3 and capping `max_token_transfer_latency_ms` at 500 milliseconds. Furthermore, a `require_recipient_capacity_check` prevents resource exhaustion. Data protection by design, a cornerstone of GDPR Article 25, is implemented through a strict `require_pii_redaction_prior_to_transfer` rule and a transient `data_retention_in_transit_seconds` of 60 seconds. Following secure engineering guidelines from ISO/IEC 27001, the system must `enforce_least_privilege_context` for all exchanged data, and any cryptographic downgrade is forbidden as `allow_downgrade_encryption` is false. Comprehensive oversight is maintained with an `audit_log_level_minimum` set to 2.
Pillar: Workflow Automation · Authority: Object Management Group (OMG) · Version: 1.1.0 · Last updated:
Primary source: https://www.omg.org/spec/BPMN/2.0/
SHA-256 integrity: 7ff7647e19414163af502a84a180c0b06ced787be60c579969642a63655f1733
Primary Citations — 7 traced to source
- Object Management Group (OMG) BPMN 2.0 Specification (formal/2011-01-03) - Sec 13.2.3: Token Execution Semantics
- NIST SP 800-207: Zero Trust Architecture - Sec 2.1: Micro-segmentation and Machine-to-Machine (M2M) Auth
+ 5 more citations (full bibliography, deterministic workflow, actionable schema and crosswalks) included in the vault unlock — $0.01 via Skyfire / L402 / Direct Base USDC.
Access
- Discovery (free): /api/v1/nodes/automation-bpmn-agent-handover.json — 6-field metadata
- Vault (full node): /api/v1/vault/nodes/automation-bpmn-agent-handover.json — full 13-key payload, $0.01 USDC (L402/Skyfire/Direct Base)
- Canonical URL: https://bidda.com/intelligence/automation-bpmn-agent-handover
- Back to registry: Browse all 10,085 compliance nodes