Admin Workspace

Admin Workspace is the governance and discovery control plane for a commercial Baize Agent network.

Commercial version: Admin Workspace requires commercial authorization. Baize Core and its single-instance Web Console do not require it.

What it governs

• Agent admission: approve or reject a registration request.
• Presence: observe registration, reachability and heartbeat health.
• Discovery: search approved Agents through their self-declared Agent Cards.
• Audit metadata: inspect authorization and operational events without storing business message bodies.

What it does not do

Admin Workspace does not create Agents, forward business messages, execute tasks or become a shared credential store. The participating Agents remain responsible for their own business context, tools and authorization.

How it works with A2A

1. An Agent publishes its identity and Agent Card.
2. The Agent registers with Admin Workspace.
3. An operator approves or rejects the registration.
4. Approved Agents become discoverable.
5. A2A sends messages or task delegations directly between the participating Agents.

Agent Card

The Agent Card is the business capability source of truth. It describes the Agent's name, purpose and installed skills. Admin Workspace indexes the Card for discovery; it does not rewrite the Agent's business description.

Authorization boundary

Each receiving Agent decides who may call it. The default policy can be tightened to an allowlist or protected with a blocklist. Authentication, authorization and audit remain separate steps.

The detailed deployment and licensing procedure will be added after the commercial authorization policy is finalized.