google/sam ? reverse-engineered prompt

Build me a working MVP of SAM, a secure network for AI agents where nodes can find each other automatically and talk through a private mesh.

I want a local node that can join the network, register its identity, and expose a small MCP style endpoint so an agent can discover tools and call them through the mesh. It should feel easy to start, ideally with one command, and it should work in a local setup first, with support for running the control plane and router components too.

Please include the basics for zero trust networking, node authentication, and simple policy checks so only approved nodes and packets can communicate. If it makes sense, add a clean way to run it with Docker or Kubernetes, plus a quick demo flow where one agent joins and successfully discovers a tool on another node. Use the docs and current library guidance online if you need to, and make the setup as simple and practical as possible.