{"id":39401,"date":"2026-08-18T10:24:00","date_gmt":"2026-08-18T10:24:00","guid":{"rendered":"https:\/\/www.tun.com\/home\/?p=39401"},"modified":"2026-08-18T14:24:03","modified_gmt":"2026-08-18T14:24:03","slug":"google-releases-zero-trust-ai-agent-security-blueprint-on-adk","status":"publish","type":"post","link":"https:\/\/www.tun.com\/home\/google-releases-zero-trust-ai-agent-security-blueprint-on-adk\/","title":{"rendered":"Google Releases Zero-Trust AI Agent Security Blueprint on ADK"},"content":{"rendered":"\n<div class=\"wp-block-group\"><div class=\"wp-block-group__inner-container is-layout-constrained wp-block-group-is-layout-constrained\">\n<div class=\"wp-block-uagb-blockquote uagb-block-e7eb3fc3 uagb-blockquote__skin-border uagb-blockquote__stack-img-none\"><blockquote class=\"uagb-blockquote\"><div class=\"uagb-blockquote__content\">Google has open-sourced a working demo that shows developers how to build production-safe AI agents using its Agent Development Kit and Gemini. The release tackles one of the hardest unsolved problems in agentic AI: what happens when a language model gets tricked into issuing unauthorized refunds or executing malicious code.<\/div><footer><div class=\"uagb-blockquote__author-wrap uagb-blockquote__author-at-left\"><\/div><\/footer><\/blockquote><\/div>\n\n\n\n<div class=\"wp-block-group is-content-justification-space-between is-nowrap is-layout-flex wp-container-core-group-is-layout-b0ffac9c wp-block-group-is-layout-flex\"><div style=\"font-size:16px\" class=\"has-text-align-left wp-block-post-author\"><div class=\"wp-block-post-author__content\"><p class=\"wp-block-post-author__name\">The University Network<\/p><\/div><\/div>\n\n\n<div class=\"wp-block-uagb-social-share uagb-social-share__outer-wrap uagb-social-share__layout-horizontal uagb-block-ee584a31\">\n<div class=\"wp-block-uagb-social-share-child uagb-ss-repeater uagb-ss__wrapper uagb-block-ec619ce7\"><span class=\"uagb-ss__link\" data-href=\"https:\/\/www.facebook.com\/sharer.php?u=\" tabindex=\"0\" role=\"button\" aria-label=\"facebook\"><span class=\"uagb-ss__source-wrap\"><span class=\"uagb-ss__source-icon\"><svg xmlns=\"https:\/\/www.w3.org\/2000\/svg\" viewBox=\"0 0 512 512\"><path d=\"M504 256C504 119 393 8 256 8S8 119 8 256c0 123.8 90.69 226.4 209.3 245V327.7h-63V256h63v-54.64c0-62.15 37-96.48 93.67-96.48 27.14 0 55.52 4.84 55.52 4.84v61h-31.28c-30.8 0-40.41 19.12-40.41 38.73V256h68.78l-11 71.69h-57.78V501C413.3 482.4 504 379.8 504 256z\"><\/path><\/svg><\/span><\/span><\/span><\/div>\n\n\n\n<div class=\"wp-block-uagb-social-share-child uagb-ss-repeater uagb-ss__wrapper uagb-block-32d99934\"><span class=\"uagb-ss__link\" data-href=\"https:\/\/twitter.com\/share?url=\" tabindex=\"0\" role=\"button\" aria-label=\"twitter\"><span class=\"uagb-ss__source-wrap\"><span class=\"uagb-ss__source-icon\"><svg xmlns=\"https:\/\/www.w3.org\/2000\/svg\" viewBox=\"0 0 512 512\"><path d=\"M389.2 48h70.6L305.6 224.2 487 464H345L233.7 318.6 106.5 464H35.8L200.7 275.5 26.8 48H172.4L272.9 180.9 389.2 48zM364.4 421.8h39.1L151.1 88h-42L364.4 421.8z\"><\/path><\/svg><\/span><\/span><\/span><\/div>\n\n\n\n<div class=\"wp-block-uagb-social-share-child uagb-ss-repeater uagb-ss__wrapper uagb-block-1d136f14\"><span class=\"uagb-ss__link\" data-href=\"https:\/\/www.linkedin.com\/shareArticle?url=\" tabindex=\"0\" role=\"button\" aria-label=\"linkedin\"><span class=\"uagb-ss__source-wrap\"><span class=\"uagb-ss__source-icon\"><svg xmlns=\"https:\/\/www.w3.org\/2000\/svg\" viewBox=\"0 0 448 512\"><path d=\"M416 32H31.9C14.3 32 0 46.5 0 64.3v383.4C0 465.5 14.3 480 31.9 480H416c17.6 0 32-14.5 32-32.3V64.3c0-17.8-14.4-32.3-32-32.3zM135.4 416H69V202.2h66.5V416zm-33.2-243c-21.3 0-38.5-17.3-38.5-38.5S80.9 96 102.2 96c21.2 0 38.5 17.3 38.5 38.5 0 21.3-17.2 38.5-38.5 38.5zm282.1 243h-66.4V312c0-24.8-.5-56.7-34.5-56.7-34.6 0-39.9 27-39.9 54.9V416h-66.4V202.2h63.7v29.2h.9c8.9-16.8 30.6-34.5 62.9-34.5 67.2 0 79.7 44.3 79.7 101.9V416z\"><\/path><\/svg><\/span><\/span><\/span><\/div>\n<\/div>\n<\/div>\n<\/div><\/div>\n\n\n\n<p class=\"wp-block-paragraph\">Google&#8217;s Agent Development Kit team has published an open-source security reference called <strong>zero-trust-agents<\/strong>, a fully runnable demonstration of how to build an autonomous AI agent that doesn&#8217;t become a liability the moment it touches a live database. Built on ADK \u2014 the agent framework Google open-sourced in April 2025 \u2014 and its Gemini models, the project centers on a Customer Support and Returns Agent that can issue refunds, write to databases, and execute dynamically generated Python code. The security architecture it demonstrates is the point.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The announcement arrives as prompt injection has climbed to the top of OWASP&#8217;s list of vulnerabilities for LLM applications, and as research has shown injection attacks succeeding at rates as high as 84 percent in controlled settings. Most agent frameworks \u2014 LangChain, CrewAI, AutoGen, LlamaIndex, Semantic Kernel \u2014 provide the orchestration machinery for LLMs to call tools, but none of them natively prevent a manipulated model from executing a dangerous action before anyone can stop it. The prevailing industry advice has been to bolt on a separate &#8220;agent control plane&#8221; for policy enforcement. Google&#8217;s demo is notable for embedding that logic directly into the reference implementation.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Why System Prompt Rules Aren&#8217;t Enough<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The core argument of the release is blunt: telling an agent &#8220;never refund more than the order total&#8221; inside a system prompt is not a security control. As the ADK team wrote in the accompanying blog post:<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p class=\"wp-block-paragraph\">&#8220;Adding\u00a0<em>&#8216;Never refund more than the order total&#8217;<\/em>\u00a0to the system prompt does not solve the problem. System prompts are soft constraints. They can be bypassed by prompt injection, altered during prompt tuning, or behave unpredictably across model updates.&#8221;<\/p>\n<\/blockquote>\n\n\n\n<p class=\"wp-block-paragraph\">The release demonstrates what replaces those soft constraints: three distinct security layers, each covering blind spots the others can&#8217;t address.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Three Layers, Each Doing a Different Job<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The first layer is cryptographic signing of every database write. In the demo, each agent holds its own identity, and every state-changing transaction is signed before it reaches the database. In a production Google Cloud environment, private signing keys are generated inside a tamper-resistant Hardware Security Module and never leave it; locally, the demo simulates this with an HMAC key so no cloud account is required. A background audit process continuously re-verifies ledger signatures, meaning a direct database manipulation \u2014 say, changing a $149.00 refund to $10,000.00 \u2014 is immediately detectable because the signature no longer matches the payload.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The second layer addresses dynamically generated code. When an agent writes Python on the fly to calculate restocking fees or parse logs, simply running that code inside a standard Docker container is dangerous \u2014 containers share the host Linux kernel, and a kernel vulnerability or misconfigured capability can hand an attacker root access to the host. The demo instead routes all generated scripts through a gVisor-based sandbox: code is mounted read-only, dangerous syscalls are blocked at the user-space kernel level, and a five-second execution timeout kills runaway loops before they cause harm.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The third layer is what the team calls a Semantic Gateway \u2014 a deterministic reverse proxy that sits in front of both the model and the database. Unlike the LLM itself, the gateway applies hard-coded rules: checking that refund amounts don&#8217;t exceed order totals, scanning outputs for secret strings before they&#8217;re returned, enforcing business logic that doesn&#8217;t bend under pressure from a cleverly worded prompt. Google also recommends wiring these gateway rules into CI\/CD pipelines as unit tests, so a model upgrade or prompt revision can&#8217;t quietly break a security policy.<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p class=\"wp-block-paragraph\">&#8220;Building autonomous agents does not require accepting unconstrained risk. By moving security boundaries into hardware-backed identity, user-space kernel sandboxing, and deterministic input\/output validation, you help allow the model to handle dynamic reasoning while the underlying infrastructure enforces strict limits,&#8221; wrote the ADK team.<\/p>\n<\/blockquote>\n\n\n\n<h2 class=\"wp-block-heading\">What Makes This Different From Other Sandboxing Tools<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">gVisor-based sandboxing isn&#8217;t new \u2014 commercial platforms like E2B, Modal and Vercel Sandbox already offer production-grade isolation using similar technology. What distinguishes this release is that Google packages HSM-backed signing, gVisor sandboxing and a semantic gateway together in a single free, locally runnable demo tied to a named, maintained framework. That combination \u2014 breadth plus accessibility \u2014 is harder to find elsewhere.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Why This Matters If You&#8217;re Still in School or Just Starting Out<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The demo runs entirely on a laptop. No Google Cloud account, no API billing, no infrastructure setup. That makes it a genuinely low-barrier way to get hands-on with a skill set that&#8217;s becoming a real differentiator in AI engineering hiring. The three things that most often kill agentic AI projects before they reach production are uncontrolled cost from runaway agent loops, poor observability and security gaps like prompt injection \u2014 and this codebase addresses the third directly.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A candidate who can explain in an interview why system prompt constraints fail under adversarial conditions, and then describe what cryptographic non-repudiation, kernel-level sandboxing and deterministic gateways actually do instead, will stand out from the much larger pool of applicants who have only built chatbots or retrieval-augmented generation pipelines. The fact that the code lives under Google&#8217;s name on GitHub also gives it portfolio weight that a personal side project can&#8217;t easily match.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The zero-trust-agents repository and full walkthrough are available at <a href=\"https:\/\/developers.googleblog.com\/build-zero-trust-ai-agents-with-googles-agent-development-kit\/\" target=\"_blank\" rel=\"noopener noreferrer\">Google&#8217;s developer blog<\/a>.<\/p>\n\n\n\n<div style=\"height:6px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p class=\"source-attribution wp-block-paragraph\"><strong>Source: <\/strong><a href=\"https:\/\/developers.googleblog.com\/build-zero-trust-ai-agents-with-googles-agent-development-kit\/\" target=\"_blank\" rel=\"nofollow noopener\">Google AI<\/a><\/p>\n\n\n\n<details class=\"research-citations\">\n<summary>Additional research sources<\/summary>\n<ul>\n<li><a href=\"https:\/\/sidbharath.com\/blog\/the-complete-guide-to-googles-agent-development-kit-adk\/\" rel=\"nofollow noopener\" target=\"_blank\">https:\/\/sidbharath.com\/blog\/the-complete-guide-to-googles-agent-development-kit-adk\/<\/a><\/li>\n<li><a href=\"https:\/\/zylos.ai\/research\/2026-01-24-ai-agent-code-execution-sandboxing\/\" rel=\"nofollow noopener\" target=\"_blank\">https:\/\/zylos.ai\/research\/2026-01-24-ai-agent-code-execution-sandboxing\/<\/a><\/li>\n<li><a href=\"https:\/\/zylos.ai\/research\/2026-04-04-ai-agent-sandboxing-security-isolation\/\" rel=\"nofollow noopener\" target=\"_blank\">https:\/\/zylos.ai\/research\/2026-04-04-ai-agent-sandboxing-security-isolation\/<\/a><\/li>\n<li><a href=\"https:\/\/cordum.io\/blog\/ai-agent-frameworks-comparison\" rel=\"nofollow noopener\" target=\"_blank\">https:\/\/cordum.io\/blog\/ai-agent-frameworks-comparison<\/a><\/li>\n<li><a href=\"https:\/\/futureagi.substack.com\/p\/top-5-agentic-ai-frameworks-to-watch\" rel=\"nofollow noopener\" target=\"_blank\">https:\/\/futureagi.substack.com\/p\/top-5-agentic-ai-frameworks-to-watch<\/a><\/li>\n<\/ul>\n<\/details>\n","protected":false},"excerpt":{"rendered":"<p>Google has open-sourced a working demo that shows developers how to build production-safe AI agents using its Agent Development Kit and Gemini. The release tackles one of the hardest unsolved problems in agentic AI: what happens when a language model gets tricked into issuing unauthorized refunds or executing malicious code.<\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"single-no-separators","format":"standard","meta":{"_acf_changed":false,"_uag_custom_page_level_css":"","_monsterinsights_skip_tracking":false,"footnotes":""},"categories":[8],"tags":[754,3782,3781,740,3784,757,758,3783,746,3532,748,3785,3780,3779,3512],"class_list":["post-39401","post","type-post","status-publish","format-standard","hentry","category-ai","tag-ai-agents","tag-autogen","tag-crewai","tag-developer-tools","tag-e2b","tag-google","tag-langchain","tag-llamaindex","tag-microsoft","tag-modal","tag-open-source","tag-owasp","tag-prompt-injection","tag-security","tag-vercel"],"acf":[],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"Google has open-sourced a working demo that shows developers how to build production-safe AI agents using its Agent Development Kit and Gemini. The release tackles one of the hardest unsolved problems in agentic AI: what happens when a language model gets tricked into issuing unauthorized refunds or executing malicious code.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"The University Network\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/www.tun.com\/home\/google-releases-zero-trust-ai-agent-security-blueprint-on-adk\/\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"en_US\" \/>\n\t\t<meta property=\"og:site_name\" content=\"TUN - The University Network\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"Google Releases Zero-Trust AI Agent Security Blueprint on ADK - TUN\" \/>\n\t\t<meta property=\"og:description\" content=\"Google has open-sourced a working demo that shows developers how to build production-safe AI agents using its Agent Development Kit and Gemini. The release tackles one of the hardest unsolved problems in agentic AI: what happens when a language model gets tricked into issuing unauthorized refunds or executing malicious code.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/www.tun.com\/home\/google-releases-zero-trust-ai-agent-security-blueprint-on-adk\/\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2026-08-18T10:24:00+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-08-18T14:24:03+00:00\" \/>\n\t\t<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n\t\t<meta name=\"twitter:title\" content=\"Google Releases Zero-Trust AI Agent Security Blueprint on ADK - TUN\" \/>\n\t\t<meta name=\"twitter:description\" content=\"Google has open-sourced a working demo that shows developers how to build production-safe AI agents using its Agent Development Kit and Gemini. The release tackles one of the hardest unsolved problems in agentic AI: what happens when a language model gets tricked into issuing unauthorized refunds or executing malicious code.\" \/>\n\t\t<script type=\"application\/ld+json\" class=\"aioseo-schema\">\n\t\t\t{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"BlogPosting\",\"@id\":\"https:\\\/\\\/www.tun.com\\\/home\\\/google-releases-zero-trust-ai-agent-security-blueprint-on-adk\\\/#blogposting\",\"name\":\"Google Releases Zero-Trust AI Agent Security Blueprint on ADK - TUN\",\"headline\":\"Google Releases Zero-Trust AI Agent Security Blueprint on ADK\",\"author\":{\"@id\":\"https:\\\/\\\/www.tun.com\\\/home\\\/author\\\/funky_junkie\\\/#author\"},\"publisher\":{\"@id\":\"https:\\\/\\\/www.tun.com\\\/home\\\/#organization\"},\"datePublished\":\"2026-08-18T10:24:00+00:00\",\"dateModified\":\"2026-08-18T14:24:03+00:00\",\"inLanguage\":\"en-US\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.tun.com\\\/home\\\/google-releases-zero-trust-ai-agent-security-blueprint-on-adk\\\/#webpage\"},\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.tun.com\\\/home\\\/google-releases-zero-trust-ai-agent-security-blueprint-on-adk\\\/#webpage\"},\"articleSection\":\"AI, ai agents, AutoGen, CrewAI, developer tools, E2B, Google, LangChain, LlamaIndex, Microsoft, Modal, open source, OWASP, prompt injection, security, Vercel\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.tun.com\\\/home\\\/google-releases-zero-trust-ai-agent-security-blueprint-on-adk\\\/#breadcrumblist\",\"itemListElement\":[{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.tun.com\\\/home\\\/#listItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.tun.com\\\/home\\\/\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.tun.com\\\/home\\\/category\\\/ai\\\/#listItem\",\"name\":\"AI\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.tun.com\\\/home\\\/category\\\/ai\\\/#listItem\",\"position\":2,\"name\":\"AI\",\"item\":\"https:\\\/\\\/www.tun.com\\\/home\\\/category\\\/ai\\\/\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.tun.com\\\/home\\\/google-releases-zero-trust-ai-agent-security-blueprint-on-adk\\\/#listItem\",\"name\":\"Google Releases Zero-Trust AI Agent Security Blueprint on ADK\"},\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.tun.com\\\/home\\\/#listItem\",\"name\":\"Home\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.tun.com\\\/home\\\/google-releases-zero-trust-ai-agent-security-blueprint-on-adk\\\/#listItem\",\"position\":3,\"name\":\"Google Releases Zero-Trust AI Agent Security Blueprint on ADK\",\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.tun.com\\\/home\\\/category\\\/ai\\\/#listItem\",\"name\":\"AI\"}}]},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.tun.com\\\/home\\\/#organization\",\"name\":\"Home\",\"description\":\"The University Network\",\"url\":\"https:\\\/\\\/www.tun.com\\\/home\\\/\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.tun.com\\\/home\\\/author\\\/funky_junkie\\\/#author\",\"url\":\"https:\\\/\\\/www.tun.com\\\/home\\\/author\\\/funky_junkie\\\/\",\"name\":\"The University Network\",\"image\":{\"@type\":\"ImageObject\",\"@id\":\"https:\\\/\\\/www.tun.com\\\/home\\\/google-releases-zero-trust-ai-agent-security-blueprint-on-adk\\\/#authorImage\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/13dd0893ea3180b8e23da81ab702e21a881401f7778d2b4aedbd75103e0b7e4f?s=96&d=mm&r=g\",\"width\":96,\"height\":96,\"caption\":\"The University Network\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.tun.com\\\/home\\\/google-releases-zero-trust-ai-agent-security-blueprint-on-adk\\\/#webpage\",\"url\":\"https:\\\/\\\/www.tun.com\\\/home\\\/google-releases-zero-trust-ai-agent-security-blueprint-on-adk\\\/\",\"name\":\"Google Releases Zero-Trust AI Agent Security Blueprint on ADK - TUN\",\"description\":\"Google has open-sourced a working demo that shows developers how to build production-safe AI agents using its Agent Development Kit and Gemini. The release tackles one of the hardest unsolved problems in agentic AI: what happens when a language model gets tricked into issuing unauthorized refunds or executing malicious code.\",\"inLanguage\":\"en-US\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.tun.com\\\/home\\\/#website\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.tun.com\\\/home\\\/google-releases-zero-trust-ai-agent-security-blueprint-on-adk\\\/#breadcrumblist\"},\"author\":{\"@id\":\"https:\\\/\\\/www.tun.com\\\/home\\\/author\\\/funky_junkie\\\/#author\"},\"creator\":{\"@id\":\"https:\\\/\\\/www.tun.com\\\/home\\\/author\\\/funky_junkie\\\/#author\"},\"datePublished\":\"2026-08-18T10:24:00+00:00\",\"dateModified\":\"2026-08-18T14:24:03+00:00\"},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.tun.com\\\/home\\\/#website\",\"url\":\"https:\\\/\\\/www.tun.com\\\/home\\\/\",\"name\":\"Home\",\"description\":\"The University Network\",\"inLanguage\":\"en-US\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.tun.com\\\/home\\\/#organization\"}}]}\n\t\t<\/script>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"Google Releases Zero-Trust AI Agent Security Blueprint on ADK - TUN","description":"Google has open-sourced a working demo that shows developers how to build production-safe AI agents using its Agent Development Kit and Gemini. The release tackles one of the hardest unsolved problems in agentic AI: what happens when a language model gets tricked into issuing unauthorized refunds or executing malicious code.","canonical_url":"https:\/\/www.tun.com\/home\/google-releases-zero-trust-ai-agent-security-blueprint-on-adk\/","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"BlogPosting","@id":"https:\/\/www.tun.com\/home\/google-releases-zero-trust-ai-agent-security-blueprint-on-adk\/#blogposting","name":"Google Releases Zero-Trust AI Agent Security Blueprint on ADK - TUN","headline":"Google Releases Zero-Trust AI Agent Security Blueprint on ADK","author":{"@id":"https:\/\/www.tun.com\/home\/author\/funky_junkie\/#author"},"publisher":{"@id":"https:\/\/www.tun.com\/home\/#organization"},"datePublished":"2026-08-18T10:24:00+00:00","dateModified":"2026-08-18T14:24:03+00:00","inLanguage":"en-US","mainEntityOfPage":{"@id":"https:\/\/www.tun.com\/home\/google-releases-zero-trust-ai-agent-security-blueprint-on-adk\/#webpage"},"isPartOf":{"@id":"https:\/\/www.tun.com\/home\/google-releases-zero-trust-ai-agent-security-blueprint-on-adk\/#webpage"},"articleSection":"AI, ai agents, AutoGen, CrewAI, developer tools, E2B, Google, LangChain, LlamaIndex, Microsoft, Modal, open source, OWASP, prompt injection, security, Vercel"},{"@type":"BreadcrumbList","@id":"https:\/\/www.tun.com\/home\/google-releases-zero-trust-ai-agent-security-blueprint-on-adk\/#breadcrumblist","itemListElement":[{"@type":"ListItem","@id":"https:\/\/www.tun.com\/home\/#listItem","position":1,"name":"Home","item":"https:\/\/www.tun.com\/home\/","nextItem":{"@type":"ListItem","@id":"https:\/\/www.tun.com\/home\/category\/ai\/#listItem","name":"AI"}},{"@type":"ListItem","@id":"https:\/\/www.tun.com\/home\/category\/ai\/#listItem","position":2,"name":"AI","item":"https:\/\/www.tun.com\/home\/category\/ai\/","nextItem":{"@type":"ListItem","@id":"https:\/\/www.tun.com\/home\/google-releases-zero-trust-ai-agent-security-blueprint-on-adk\/#listItem","name":"Google Releases Zero-Trust AI Agent Security Blueprint on ADK"},"previousItem":{"@type":"ListItem","@id":"https:\/\/www.tun.com\/home\/#listItem","name":"Home"}},{"@type":"ListItem","@id":"https:\/\/www.tun.com\/home\/google-releases-zero-trust-ai-agent-security-blueprint-on-adk\/#listItem","position":3,"name":"Google Releases Zero-Trust AI Agent Security Blueprint on ADK","previousItem":{"@type":"ListItem","@id":"https:\/\/www.tun.com\/home\/category\/ai\/#listItem","name":"AI"}}]},{"@type":"Organization","@id":"https:\/\/www.tun.com\/home\/#organization","name":"Home","description":"The University Network","url":"https:\/\/www.tun.com\/home\/"},{"@type":"Person","@id":"https:\/\/www.tun.com\/home\/author\/funky_junkie\/#author","url":"https:\/\/www.tun.com\/home\/author\/funky_junkie\/","name":"The University Network","image":{"@type":"ImageObject","@id":"https:\/\/www.tun.com\/home\/google-releases-zero-trust-ai-agent-security-blueprint-on-adk\/#authorImage","url":"https:\/\/secure.gravatar.com\/avatar\/13dd0893ea3180b8e23da81ab702e21a881401f7778d2b4aedbd75103e0b7e4f?s=96&d=mm&r=g","width":96,"height":96,"caption":"The University Network"}},{"@type":"WebPage","@id":"https:\/\/www.tun.com\/home\/google-releases-zero-trust-ai-agent-security-blueprint-on-adk\/#webpage","url":"https:\/\/www.tun.com\/home\/google-releases-zero-trust-ai-agent-security-blueprint-on-adk\/","name":"Google Releases Zero-Trust AI Agent Security Blueprint on ADK - TUN","description":"Google has open-sourced a working demo that shows developers how to build production-safe AI agents using its Agent Development Kit and Gemini. The release tackles one of the hardest unsolved problems in agentic AI: what happens when a language model gets tricked into issuing unauthorized refunds or executing malicious code.","inLanguage":"en-US","isPartOf":{"@id":"https:\/\/www.tun.com\/home\/#website"},"breadcrumb":{"@id":"https:\/\/www.tun.com\/home\/google-releases-zero-trust-ai-agent-security-blueprint-on-adk\/#breadcrumblist"},"author":{"@id":"https:\/\/www.tun.com\/home\/author\/funky_junkie\/#author"},"creator":{"@id":"https:\/\/www.tun.com\/home\/author\/funky_junkie\/#author"},"datePublished":"2026-08-18T10:24:00+00:00","dateModified":"2026-08-18T14:24:03+00:00"},{"@type":"WebSite","@id":"https:\/\/www.tun.com\/home\/#website","url":"https:\/\/www.tun.com\/home\/","name":"Home","description":"The University Network","inLanguage":"en-US","publisher":{"@id":"https:\/\/www.tun.com\/home\/#organization"}}]},"og:locale":"en_US","og:site_name":"TUN - The University Network","og:type":"article","og:title":"Google Releases Zero-Trust AI Agent Security Blueprint on ADK - TUN","og:description":"Google has open-sourced a working demo that shows developers how to build production-safe AI agents using its Agent Development Kit and Gemini. The release tackles one of the hardest unsolved problems in agentic AI: what happens when a language model gets tricked into issuing unauthorized refunds or executing malicious code.","og:url":"https:\/\/www.tun.com\/home\/google-releases-zero-trust-ai-agent-security-blueprint-on-adk\/","article:published_time":"2026-08-18T10:24:00+00:00","article:modified_time":"2026-08-18T14:24:03+00:00","twitter:card":"summary_large_image","twitter:title":"Google Releases Zero-Trust AI Agent Security Blueprint on ADK - TUN","twitter:description":"Google has open-sourced a working demo that shows developers how to build production-safe AI agents using its Agent Development Kit and Gemini. The release tackles one of the hardest unsolved problems in agentic AI: what happens when a language model gets tricked into issuing unauthorized refunds or executing malicious code."},"aioseo_meta_data":{"post_id":"39401","title":null,"description":null,"keywords":null,"keyphrases":{"focus":{"keyphrase":"","score":0,"analysis":{"keyphraseInTitle":{"score":0,"maxScore":9,"error":1}}},"additional":[]},"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":"","og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"BlogPosting","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":"-1","robots_max_videopreview":"-1","robots_max_imagepreview":"large","priority":null,"frequency":"default","local_seo":null,"breadcrumb_settings":null,"limit_modified_date":true,"ai":{"faqs":[],"keyPoints":[],"schemas":[],"titles":[],"descriptions":[],"socialPosts":{"email":[],"linkedin":[],"twitter":[],"facebook":[],"instagram":[]}},"created":"2026-08-18 14:24:04","updated":"2026-08-18 14:59:52","seo_analyzer_scan_date":null,"focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"aioseo_breadcrumb":"<div class=\"aioseo-breadcrumbs\"><span class=\"aioseo-breadcrumb\">\n\t\t\t<a href=\"https:\/\/www.tun.com\/home\/\" title=\"Home\">Home<\/a>\n\t\t<\/span><span class=\"aioseo-breadcrumb-separator\">\u00bb<\/span><span class=\"aioseo-breadcrumb\">\n\t\t\t<a href=\"https:\/\/www.tun.com\/home\/category\/ai\/\" title=\"AI\">AI<\/a>\n\t\t<\/span><span class=\"aioseo-breadcrumb-separator\">\u00bb<\/span><span class=\"aioseo-breadcrumb\">\n\t\t\tGoogle Releases Zero-Trust AI Agent Security Blueprint on ADK\n\t\t<\/span><\/div>","aioseo_breadcrumb_json":[{"label":"Home","link":"https:\/\/www.tun.com\/home\/"},{"label":"AI","link":"https:\/\/www.tun.com\/home\/category\/ai\/"},{"label":"Google Releases Zero-Trust AI Agent Security Blueprint on ADK","link":"https:\/\/www.tun.com\/home\/google-releases-zero-trust-ai-agent-security-blueprint-on-adk\/"}],"uagb_featured_image_src":{"full":false,"thumbnail":false,"medium":false,"medium_large":false,"large":false,"1536x1536":false,"2048x2048":false},"uagb_author_info":{"display_name":"The University Network","author_link":"https:\/\/www.tun.com\/home\/author\/funky_junkie\/"},"uagb_comment_info":0,"uagb_excerpt":"Google has open-sourced a working demo that shows developers how to build production-safe AI agents using its Agent Development Kit and Gemini. The release tackles one of the hardest unsolved problems in agentic AI: what happens when a language model gets tricked into issuing unauthorized refunds or executing malicious code.","_links":{"self":[{"href":"https:\/\/www.tun.com\/home\/wp-json\/wp\/v2\/posts\/39401","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.tun.com\/home\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.tun.com\/home\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.tun.com\/home\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.tun.com\/home\/wp-json\/wp\/v2\/comments?post=39401"}],"version-history":[{"count":5,"href":"https:\/\/www.tun.com\/home\/wp-json\/wp\/v2\/posts\/39401\/revisions"}],"predecessor-version":[{"id":39447,"href":"https:\/\/www.tun.com\/home\/wp-json\/wp\/v2\/posts\/39401\/revisions\/39447"}],"wp:attachment":[{"href":"https:\/\/www.tun.com\/home\/wp-json\/wp\/v2\/media?parent=39401"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.tun.com\/home\/wp-json\/wp\/v2\/categories?post=39401"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.tun.com\/home\/wp-json\/wp\/v2\/tags?post=39401"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}