Review agent-to-agent (A2A) / multi-agent-system trust: peer identity and authentication, message integrity, capability-negotiation trust, and delegation-chain privilege narrowing. Use when an orchestrator dispatches to sub-agents or peer agents (same or different trust domain) rather than calling a tool — distinct from `mcp-security-review`'s tool-boundary case.