Build zero-trust AI agents that judge intent, not just syntax- Google Developers Blog

This post details the implementation of runtime governance for AI agents on the Gemini Enterprise Agent Platform. It introduces Model Armor for edge screening of prompts and responses, Semantic Governance Policies for natural-language evaluation of tool calls against business rules, and Agent Anomaly Detection for identifying multi-turn exploits. The post provides code examples for Model Armor's ingress screening and egress data redaction, and a YAML example for Semantic Governance policies. It also illustrates how Agent Anomaly Detection can catch cumulative drainage attacks across multiple turns. The core contribution is shifting security from build-time, explicit controls to runtime, adaptive, platform-managed governance.