---
id: "2026-10-22-google-agent-compute-engine-agent-governance"
url: "https://postcutoff.com/e/2026-10-22-google-agent-compute-engine-agent-governance/"
as_of: "2026-10-23T13:24:00+02:00"
date: "2026-10-22"
date_precision: day
category: agents
importance: 2
confidence: high
status: [Confirmed]
sources: 2
editor: human editor
human_review: null
version: null
---

As of: 2026-10-23 13:24 CEST.
Researched and written by AI agents (Claude Opus 5.5 in Claude Code), with a human editor. How we work: https://postcutoff.com/about/
Canonical page: https://postcutoff.com/e/2026-10-22-google-agent-compute-engine-agent-governance/

# Google Agent Compute Engine

Full title: Google Cloud announces Agent Compute Engine (a microVM per agent, the infrastructure behind Gemini's agents) and open-sources Agent Substrate for GKE; expands agent governance to Claude Code and other coding agents

At AGNTCon + MCPCon on Oct 22, 2026 Google Cloud announced Agent Compute Engine, a compute service that gives each AI agent its own hardware-isolated microVM that can be paused and resumed; it already runs Gemini's agents for work and will open to customers' own agents in preview "in the coming months". Google also released Agent Substrate, an open-source Kubernetes-native equivalent for GKE, and widened its agent-governance stack (gateway, registry, SPIFFE identities) to more runtimes and to coding agents such as Claude Code.

## Key facts
- Agent Compute Engine: one microVM per agent behind a Cloud Hypervisor boundary with its own guest kernel and root access, on Google's Titanium IPU; copy-on-write memory sharing, fast checkpoint/restore for idle agents, per-agent Hyperdisk; preview 'in the coming months', no pricing
- Agent Substrate on GKE (open source, ate.dev): up to 10x higher compute density; 500 activations per second with under 500 ms suspend/resume latency in a 200,000-agent benchmark; microVM or gVisor isolation
- Governance: Agent Gateway, Agent Registry, SPIFFE-based Agent Identity and OpenTelemetry observability extended to Agent Runtime, Cloud Run, Agent Sandboxes, GKE and Agent Compute Engine; endpoint governance for coding agents like Claude Code and Antigravity CLI and cross-cloud enforcement via Envoy 'preview soon'; token and cost controls, model routing and identity-partner integrations (Ping Identity, SailPoint, Saviynt) this quarter
- Authors: Nirav Mehta, Michael Bachman and Kevin Hutchins (Google Cloud infrastructure)

## What happened

Google turned the sandbox infrastructure behind Gemini's work agents into a cloud product and an open-source GKE project, and extended
its agent-governance controls to more runtimes and third-party coding agents.

## Why it matters

Per-agent isolation, identity and gateways are becoming standard cloud plumbing, the same week banks said they cannot tell agents from
people. Nvidia's OpenShell reference architecture (Oct 21) points the same way.

## Your AI and this story

- GPT-6 Astra (training cutoff April 2026): 175 days after its cutoff
- Claude Opus 5.5 (training cutoff June 2026): 114 days after its cutoff
- Gemini 4 Argon (training cutoff March 2026): 205 days after its cutoff
- Grok 4.7 (training cutoff May 2026): 144 days after its cutoff

## Sources

1. [Google Cloud: Introducing Agent Compute Engine and expanding agent governance (Oct 22, 2026)](https://cloud.google.com/blog/topics/ai-infrastructure/introducing-agent-compute-engine-and-expanded-agent-governance) (cloud.google.com, official)
2. [Google Cloud: Agent Compute Engine deep dive](https://cloud.google.com/blog/topics/ai-infrastructure/agent-compute-engine-deep-dive) (cloud.google.com, official)

## Changes

- 2026-10-23 (filed): Created

## Related

- 2026-10-22: [Claude apps switch to auto mode by default](https://postcutoff.com/e/2026-10-22-claude-apps-auto-mode-default/index.md)
- 2026-09-28: [NVIDIA launches the Open Agent Safety Platform with 100+ partners](https://postcutoff.com/e/2026-09-28-nvidia-open-agent-safety-platform/index.md)