docs(architect): weekly KB update — 52 files refreshed (2026-04)

Key content changes:
- MLOps: MLflow 3 scorers expanded (RetrievalRelevance, Fluency, multi-turn judges)
- MLflow 3 A/B eval: mirror_traffic GA confirmed, new scorer catalog
- CI/CD: OIDC auth replaces deprecated --sdk-auth (Azure ML GitHub Actions)
- Agent framework A2A: updated SDK patterns (A2ACardResolver, BearerAuth)
- AG-UI backend tool rendering: accurate TOOL_CALL_* event shapes
- Computer Use agents: US region requirement, credentials patterns
- Purview governance: bulk term edit, expire/delete workflows
- CAF AI Secure: 3-phase structure confirmed current
- Copilot Studio: Claude Sonnet 4.5/4.6 GA, new orchestration controls
- M365 manifest: v1.26 GA (April 2026), copilotAgents node
- Power Platform: agent flow capacity enforcement corrected
- Azure Monitor: Simple Log Alerts GA, AMBA for policy-based alerting
- Security Copilot: SCU capacity model (400 SCU/1000 users)
- EU Data Boundary: all EU + EFTA countries confirmed
- gateway-multi-backend: added 4th topology, subscription-level quota note

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

skills/ms-ai-engineering/references/agent-orchestration/agent-to-agent-a2a-protocol.md

@@ -172,11 +172,20 @@ A2A skiller mellom **meldinger** (messages) for rask, synkron kommunikasjon, og
 
 ```python
 import asyncio
+import httpx
+from a2a.client import A2ACardResolver
 from agent_framework.a2a import A2AAgent
 
 async def main():
+    a2a_host = "https://agents.nav.no/saksbehandler/a2a"
+
+    # Discover remote agent capabilities via AgentCard
+    async with httpx.AsyncClient(timeout=60.0) as http_client:
+        resolver = A2ACardResolver(httpx_client=http_client, base_url=a2a_host)
+        agent_card = await resolver.get_agent_card()  # Verified MCP 2026-04
+
     # Koble til ekstern A2A-agent
-    async with A2AAgent(name="saksbehandler", url="https://agents.nav.no/saksbehandler/a2a") as agent:
+    async with A2AAgent(name=agent_card.name, agent_card=agent_card, url=a2a_host) as agent:
 
         # Synkron streaming
         async with agent.run("Hva er min dagpengesats?", stream=True) as stream:
@@ -586,6 +595,25 @@ Hver etat eier og drifter sin egen agent. Felles inngangsagent orkestrerer via A
 
 ## Installasjon og SDK-er
 
+```python
+# Autentisert A2A-kall (AuthInterceptor-mønster) — Verified MCP 2026-04
+from a2a.client.auth.interceptor import AuthInterceptor
+
+class BearerAuth(AuthInterceptor):
+    def __init__(self, token: str):
+        self.token = token
+    async def intercept(self, request):
+        request.headers["Authorization"] = f"Bearer {self.token}"
+        return request
+
+async with A2AAgent(
+    name="secure-agent",
+    url="https://secure-a2a-agent.example.com",
+    auth_interceptor=BearerAuth("your-token"),
+) as agent:
+    response = await agent.run("Hello!")
+```
+
 ```bash
 # Python — Agent Framework
 pip install agent-framework-a2a --pre
@@ -603,13 +631,15 @@ pip install microsoft-teams-a2a
 **.NET (Semantic Kernel):**
 
 ```csharp
+// Agent card tilgjengelig på: GET /a2a/my-agent/v1/card
+// Message endpoint:          POST /a2a/my-agent/v1/message:stream
 app.MapA2A(agent, "/a2a/my-agent", agentCard: new()
 {
     Name = "Min Agent",
     Description = "Hjelpsom assistent for norsk offentlig sektor",
     Version = "1.0",
     Capabilities = new() { Streaming = true }
-});
+});  // Verified MCP 2026-04
 ```
 
 ---
@@ -638,9 +668,9 @@ app.MapA2A(agent, "/a2a/my-agent", agentCard: new()
    - https://learn.microsoft.com/azure/api-management/agent-to-agent-api
    - Confidence: **Verified** (APIM preview-støtte, februar 2026)
 
-6. **Agent Framework — A2A Integration (Python)**
+6. **Agent Framework — A2A Integration (Python og C#)**
    - https://learn.microsoft.com/agent-framework/integrations/a2a
-   - Confidence: **Verified** (offisiell SDK-dokumentasjon, februar 2026)
+   - Confidence: **Verified (MCP 2026-04)** — A2ACardResolver-pattern (Python), A2AAgent med agent_card-parameter, AuthInterceptor for sikret kall, MapA2A /v1/card og /v1/message:stream endepunkt-paths (.NET), NuGet-pakker Microsoft.Agents.AI.Hosting.A2A og .AspNetCore
 
 7. **Semantic Kernel Agent Orchestration**
    - https://learn.microsoft.com/semantic-kernel/frameworks/agent/agent-orchestration/