A tested LangGraph Agent Server composition let an A2A task update replace a pending action after its approval view was read. See the historical A2A scope gap, the evidence, and the use-time defense.