Google open-sources zero-trust P2P network for AI agents

Google released Sovereign Agent Mesh (SAM) under Apache-2.0, a zero-config, zero-trust peer-to-peer overlay that lets autonomous agents discover and call each other's MCP tools across cloud, on-prem, laptop, and edge environments without exposing internal endpoints. Identity flows from OIDC into Biscuit capability tokens, enforcing default-deny authorization on every request.

Why it matters: As agentic AI systems increasingly need to call tools across organizational boundaries, secure agent-to-agent discovery has been a real infrastructure gap. SAM is Google's bid to set a security standard for that layer before one emerges elsewhere.