Check What Google's Agent Platform Governance Features Change for Automation Ops
This page contains Coupang Partners affiliate links; the operator may earn a commission.
Key Takeaway
Google's Gemini Enterprise Agent Platform release notes from late August to early October center on agent access control, network boundaries, governance policies, and sandboxes rather than new models.
Which control features were added, and when?
Filtering the release notes down to operational controls gives the list below. The stage labels are exactly as written in the notes.
| Date (2026) | Item | Stage |
|---|---|---|
| August 15 | Basic metrics for semantic governance policies | Preview |
| August 31 | IAM-integrated access policy for Agent Gateway traffic | General availability |
| September 8 | Agent Gateway VPC connection templates (ALL_TRAFFIC, PRIVATE_RANGES_ONLY) | Feature added |
| September 9 | VPC Service Controls perimeter rule enforcement in Agent Gateway | Feature added |
| September 9 | Computer Use and Shell sandboxes | General availability |
| September 25 | VPC Service Controls support for semantic governance policies | Preview |
| September 29 | Custom denial messages for semantic governance policies | Feature added |
| September 30 | Agent Gateway integration with Cloud Trace | Preview |
Under what conditions do the network perimeter rules apply?
According to the September 9 entry, Agent Gateway enforces VPC Service Controls perimeter rules, and to use them you need to set the connection template to ALL_TRAFFIC mode. The entry says this behavior applies to gateways created after September 8. That means two gateways in the same project can behave differently depending on when they were created. This entry alone does not tell you whether gateways created before September 8 are covered, so teams with existing gateways should first check the template mode and creation date, then confirm separately in the official documentation.
What changed with the sandboxes?
On September 9, the Computer Use and Shell sandboxes reached general availability, and the notes say they support VPC Service Controls, customer-managed encryption keys (CMEK), and pause and resume. For agents that operate a screen or run commands, being able to isolate the execution environment and stop it midway matters from an operations standpoint.
What changed for cost and observability?
On September 1, compute metering for sessions and memory banks is recorded as starting. On September 2, a Deferred tier for scheduling background agents was added as a preview, with a 50% token discount noted alongside it. Since it is a preview feature, check the official pricing documentation for the discount conditions and whether it will continue. The September 30 Cloud Trace integration, a preview, is for tracing calls that pass through the gateway.
What should you check before adopting any of this?
The release notes are a change log, not a design guide. Going through the steps below helps you miss fewer items.
- Separate generally available features from previews, and build required operational controls only from generally available ones.
- Record each gateway's creation date and connection template mode.
- Decide user-facing wording such as denial messages yourself, and check where blocked requests are logged.
- If you use the SDK, note that Python SDK 2.0.1 on September 18 is marked as a breaking change, so review the earlier guides.
Where can you find the latest information?
The Gemini Enterprise Agent Platform release notes in the Google Cloud documentation are the reference. The date checked is 2026-10-08, and entries keep being added or change stage. Before you apply anything, reopen the linked document for the relevant entry.
Frequently Asked Questions
What does Agent Gateway do?
The release notes present it as a gateway that controls agent traffic. They say the IAM-integrated access policy that handles this traffic reached general availability on August 31.
Do the VPC Service Controls rules also apply to existing gateways?
The September 9 entry says the rules apply to gateways created after September 8. For gateways created earlier, that entry alone does not tell you whether the rules apply, so check the official documentation separately.
Is the semantic governance policy a generally available feature?
In the release notes, the basic metrics are listed as a preview from August 15, and VPC Service Controls support as a preview from September 25. Recheck the current stage before you rely on it as a required operational control.
Sources & Verification Date
All materials have been verified from official announcements and may have changed since verification.