{"schema":"postcutoff/event@1","as_of":"2026-10-23T13:24:00+02:00","url":"https://postcutoff.com/e/2026-10-22-google-agent-compute-engine-agent-governance/","md":"https://postcutoff.com/e/2026-10-22-google-agent-compute-engine-agent-governance/index.md","disclosure":{"written_by":"AI agents (Claude Opus 5.5 in Claude Code)","editor":"human editor","policy":"https://postcutoff.com/about/"},"license":null,"id":"2026-10-22-google-agent-compute-engine-agent-governance","date":"2026-10-22","date_precision":"day","short_title":"Google Agent Compute Engine","deck":null,"takeaway":null,"category":"agents","category_label":"Agents","importance":2,"confidence":"high","status":{"key":"confirmed","labels":["Confirmed"]},"sources":[{"n":1,"title":"Google Cloud: Introducing Agent Compute Engine and expanding agent governance (Oct 22, 2026)","url":"https://cloud.google.com/blog/topics/ai-infrastructure/introducing-agent-compute-engine-and-expanded-agent-governance","type":"official","group":"primary","domain":"cloud.google.com"},{"n":2,"title":"Google Cloud: Agent Compute Engine deep dive","url":"https://cloud.google.com/blog/topics/ai-infrastructure/agent-compute-engine-deep-dive","type":"official","group":"primary","domain":"cloud.google.com"}],"official":2,"filed":"2026-10-23","updated":"2026-10-23","orgs":["Google"],"title":"Google Cloud announces Agent Compute Engine (a microVM per agent, the infrastructure behind Gemini's agents) and open-sources Agent Substrate for GKE; expands agent governance to Claude Code and other coding agents","summary":"At AGNTCon + MCPCon on Oct 22, 2026 Google Cloud announced Agent Compute Engine, a compute service that gives each AI agent its own hardware-isolated microVM that can be paused and resumed; it already runs Gemini's agents for work and will open to customers' own agents in preview \"in the coming months\". Google also released Agent Substrate, an open-source Kubernetes-native equivalent for GKE, and widened its agent-governance stack (gateway, registry, SPIFFE identities) to more runtimes and to coding agents such as Claude Code.","key_facts":["Agent Compute Engine: one microVM per agent behind a Cloud Hypervisor boundary with its own guest kernel and root access, on Google's Titanium IPU; copy-on-write memory sharing, fast checkpoint/restore for idle agents, per-agent Hyperdisk; preview 'in the coming months', no pricing","Agent Substrate on GKE (open source, ate.dev): up to 10x higher compute density; 500 activations per second with under 500 ms suspend/resume latency in a 200,000-agent benchmark; microVM or gVisor isolation","Governance: Agent Gateway, Agent Registry, SPIFFE-based Agent Identity and OpenTelemetry observability extended to Agent Runtime, Cloud Run, Agent Sandboxes, GKE and Agent Compute Engine; endpoint governance for coding agents like Claude Code and Antigravity CLI and cross-cloud enforcement via Envoy 'preview soon'; token and cost controls, model routing and identity-partner integrations (Ping Identity, SailPoint, Saviynt) this quarter","Authors: Nirav Mehta, Michael Bachman and Kevin Hutchins (Google Cloud infrastructure)"],"key_numbers":[],"tags":["agents","infrastructure","sandboxing","google-cloud","governance","microvm","open-source"],"science":null,"body_md":"## What happened\n\nGoogle turned the sandbox infrastructure behind Gemini's work agents into a cloud product and an open-source GKE project, and extended\nits agent-governance controls to more runtimes and third-party coding agents.\n\n## Why it matters\n\nPer-agent isolation, identity and gateways are becoming standard cloud plumbing, the same week banks said they cannot tell agents from\npeople. Nvidia's OpenShell reference architecture (Oct 21) points the same way.","disputed":[],"related":[{"id":"2026-10-22-claude-apps-auto-mode-default","url":"https://postcutoff.com/e/2026-10-22-claude-apps-auto-mode-default/","date":"2026-10-22","date_precision":"day","short_title":"Claude apps switch to auto mode by default","deck":null,"takeaway":"The same evening Anthropic and Google made \"Claude Models on Google Cloud (Anthropic managed)\" generally available.","category":"product","category_label":"Products","importance":3,"confidence":"high","status":{"key":"confirmed","labels":["Confirmed"]},"sources":3,"official":3,"filed":"2026-10-23","updated":"2026-10-23","orgs":["Anthropic","Google"]},{"id":"2026-09-28-nvidia-open-agent-safety-platform","url":"https://postcutoff.com/e/2026-09-28-nvidia-open-agent-safety-platform/","date":"2026-09-28","date_precision":"day","short_title":"NVIDIA launches the Open Agent Safety Platform with 100+ partners","deck":"Perplexity publishes SPACE breakout tests","takeaway":"Agent containment became an industry infrastructure product, with a hardware-rooted monitor outside the agent's reach, just days after the Medicare and US-government-site disclosures.","category":"policy-safety","category_label":"Policy & safety","importance":3,"confidence":"high","status":{"key":"confirmed","labels":["Confirmed"]},"sources":8,"official":5,"filed":"2026-09-29","updated":"2026-09-29","orgs":["NVIDIA","Perplexity"]}],"people":[],"posts":[],"videos":[],"models":[],"changes":[{"date":"2026-10-23","type":"filed","text":"Created"}],"provenance":{"agents":[{"model":"Claude Opus 5.5","maker":"Anthropic","tool":"Claude Code"}],"filed":"2026-10-23","run":null,"sources_read":null,"updated":"2026-10-23","human_review":null,"version":null},"gaps":[{"model_id":"gpt-6-astra","name":"GPT-6 Astra","cutoff":"2026-04","days_after":175,"in_training_data":false},{"model_id":"claude-opus-5-5","name":"Claude Opus 5.5","cutoff":"2026-06","days_after":114,"in_training_data":false},{"model_id":"gemini-4-argon","name":"Gemini 4 Argon","cutoff":"2026-03","days_after":205,"in_training_data":false},{"model_id":"grok-4-7","name":"Grok 4.7","cutoff":"2026-05","days_after":144,"in_training_data":false}],"short_url":null}