<!-- mobian-agent-page publisher="dailydev" canonical="https://daily.dev/posts/introducing-agent-compute-engine-and-expanding-agent-governance-cwyxhkzx1" -->

---
title: Introducing Agent Compute Engine and expanding agent...
description: Google Cloud launched Agent Compute Engine, a purpose-built compute service that already powers Gemini as a work agent, with preview availability coming in the...
canonical: https://daily.dev/posts/introducing-agent-compute-engine-and-expanding-agent-governance-cwyxhkzx1
twitter:card: summary_large_image
twitter:site: @dailydotdev
og:type: website
og:site_name: daily.dev
og:title: Introducing Agent Compute Engine and expanding agent governance | daily.dev
og:description: Google Cloud launched Agent Compute Engine, a purpose-built compute service that already powers Gemini as a work agent, with preview availability coming in the...
og:url: https://daily.dev/posts/introducing-agent-compute-engine-and-expanding-agent-governance-cwyxhkzx1
og:image: https://api.daily.dev/og/posts/cwYXhKZx1.png
og:image:alt: Introducing Agent Compute Engine and expanding agent governance
og:image:width: 1200
og:image:height: 630
og:locale: en
---

> ## Documentation Index
> Fetch the complete documentation index at: https://daily.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Introducing Agent Compute Engine and expanding agent governance

**[Google Cloud](https://daily.dev/sources/gcp)** · 10 min read · 2 upvotes · 0 comments

## Summary

Google Cloud launched Agent Compute Engine, a purpose-built compute service that already powers Gemini as a work agent, with preview availability coming in the next few months. It gives each agent its own microVM with hardware-isolated sandbox security via Titanium, Google's offload infrastructure processing unit. It uses copy-on-write memory sharing and fast checkpoint/restore to pause idle microVMs. Google also released Agent Substrate, an open-source Kubernetes-native runtime on GKE delivering up to 10x higher compute density; in a benchmark with 200,000 agents it sustained 500 activations per second at under 500 ms suspend/resume latency. Gemini for business agent governance is expanding across Google Cloud runtimes, multicloud, on-prem and client devices.

## Full article

daily.dev links to this article rather than hosting it. Read it at the original source: <https://cloud.google.com/blog/topics/ai-infrastructure/introducing-agent-compute-engine-and-expanded-agent-governance>

## Questions this post answers

### What is Google Cloud's Agent Compute Engine and how does it isolate AI agents?

Agent Compute Engine is a purpose-built compute service that gives each AI agent its own microVM with hardware-isolated sandbox security, built on Google's Titanium offload infrastructure processing unit. It uses copy-on-write memory sharing to run multiple agents on one OS template and pauses idle microVMs via fast checkpoint and restore. It already powers Gemini as a work agent and enters preview in the coming months.

_Teams planning agent infrastructure can track preview access and rollout details for workloads like this on daily.dev._

### How much compute density improvement does Agent Substrate on GKE provide for running AI agents?

Agent Substrate delivers up to 10x higher compute density compared to traditional compute while keeping full kernel isolation and identity-based network security per agent. In a benchmark running 200,000 agents, it sustained 500 activations per second with less than 500 ms suspend and resume latency. It's open source and Kubernetes-native, running on any cluster.

_Developers evaluating Kubernetes-based agent runtimes can follow benchmarks like this on daily.dev._

### What identity and security standard does Google use to secure individual AI agents?

Agent Identity assigns each agent a unique, secure ID based on the open standard SPIFFE, acting as a digital signature for authentication, access control, and auditing. Every microVM also gets its own cryptographically verified ID, with service credentials injected in egress outside the microVM itself, part of Google's broader Gemini for business agent governance framework.

_Anyone designing secure multi-agent systems can keep up with identity standards like SPIFFE on daily.dev._

## Similar posts on daily.dev

- [Google Cloud Announces Gemini Enterprise Agent Platform](https://daily.dev/posts/google-cloud-announces-gemini-enterprise-agent-platform-b4ocuevnb) · C\# Corner · 0 upvotes · 0 comments
- [Google Announces GKE Agent Sandbox and Hypercluster at Next '26, Positioning Kubernetes as AI Agent](https://daily.dev/posts/google-announces-gke-agent-sandbox-and-hypercluster-at-next-26-positioning-kubernetes-as-ai-agent-cfmrtqf9a) · InfoQ · 0 upvotes · 0 comments
- [The top startup announcement from Next ‘26](https://daily.dev/posts/the-top-startup-announcement-from-next-26-ssimjxtxu) · Google Cloud · 0 upvotes · 0 comments
- [Google finally builds the AI and agent platform it’s been describing for years](https://daily.dev/posts/google-finally-builds-the-ai-and-agent-platform-it-s-been-describing-for-years-v8gbkmxko) · The New Stack · 0 upvotes · 0 comments

---

Tags: [#ai-agents](https://daily.dev/tags/ai-agents), [#kubernetes](https://daily.dev/tags/kubernetes), [#gcp](https://daily.dev/tags/gcp), [#google-gemini](https://daily.dev/tags/google-gemini)

[View this post on daily.dev](https://daily.dev/posts/introducing-agent-compute-engine-and-expanding-agent-governance-cwyxhkzx1)

```json
{"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]}
{"@context":"https://schema.org","@type":"TechArticle","headline":"Introducing Agent Compute Engine and expanding agent governance","url":"https://daily.dev/posts/introducing-agent-compute-engine-and-expanding-agent-governance-cwyxhkzx1","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/introducing-agent-compute-engine-and-expanding-agent-governance-cwyxhkzx1"},"datePublished":"2026-10-22T13:04:19.163Z","dateModified":"2026-10-28T16:15:38.495Z","description":"Google Cloud launched Agent Compute Engine, a purpose-built compute service that already powers Gemini as a work agent, with preview availability coming in the...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/220f02a7f2bc81c089e4e6ac75e24f49?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/220f02a7f2bc81c089e4e6ac75e24f49?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Google Cloud","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Google Cloud","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/gcp","url":"https://daily.dev/sources/gcp"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/introducing-agent-compute-engine-and-expanding-agent-governance-cwyxhkzx1","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":2},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"ai-agents,kubernetes,gcp,google-gemini","timeRequired":"PT10M"}
{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Google Cloud","item":"https://daily.dev/sources/gcp"},{"@type":"ListItem","position":3,"name":"Introducing Agent Compute Engine and expanding agent governance"}]}
{"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/introducing-agent-compute-engine-and-expanding-agent-governance-cwyxhkzx1#faq","mainEntity":[{"@type":"Question","name":"What is Google Cloud's Agent Compute Engine and how does it isolate AI agents?","acceptedAnswer":{"@type":"Answer","text":"Agent Compute Engine is a purpose-built compute service that gives each AI agent its own microVM with hardware-isolated sandbox security, built on Google's Titanium offload infrastructure processing unit. It uses copy-on-write memory sharing to run multiple agents on one OS template and pauses idle microVMs via fast checkpoint and restore. It already powers Gemini as a work agent and enters preview in the coming months. Teams planning agent infrastructure can track preview access and rollout details for workloads like this on daily.dev."}},{"@type":"Question","name":"How much compute density improvement does Agent Substrate on GKE provide for running AI agents?","acceptedAnswer":{"@type":"Answer","text":"Agent Substrate delivers up to 10x higher compute density compared to traditional compute while keeping full kernel isolation and identity-based network security per agent. In a benchmark running 200,000 agents, it sustained 500 activations per second with less than 500 ms suspend and resume latency. It's open source and Kubernetes-native, running on any cluster. Developers evaluating Kubernetes-based agent runtimes can follow benchmarks like this on daily.dev."}},{"@type":"Question","name":"What identity and security standard does Google use to secure individual AI agents?","acceptedAnswer":{"@type":"Answer","text":"Agent Identity assigns each agent a unique, secure ID based on the open standard SPIFFE, acting as a digital signature for authentication, access control, and auditing. Every microVM also gets its own cryptographically verified ID, with service credentials injected in egress outside the microVM itself, part of Google's broader Gemini for business agent governance framework. Anyone designing secure multi-agent systems can keep up with identity standards like SPIFFE on daily.dev."}}]}
```

