Build zero-trust AI agents with Google's Agent Development Kit- Google Developers Blog

This post introduces a zero-trust architecture for building secure AI agents. It details three key layers: 1. Cryptographic write signatures using Cloud KMS and Service Accounts for non-repudiation and tamper detection, with example Python code for signing and verification. 2. Kernel-level code isolation using gVisor for executing dynamically generated code in a secure sandbox with zero network egress and resource limits, demonstrated with a Python runner. 3. Deterministic semantic gateways acting as reverse proxies to enforce business logic and filter sensitive data through CI/CD regression testing guardrails, with example Python code for input/output inspection and unit tests.