Loopjacking in A2A Implementations: Hijacking Human-in-the-Loop Approvals

A tested LangGraph Agent Server composition let an A2A task update replace a pending action after its approval view was read. See the historical A2A scope gap, the evidence, and the use-time defense.