Gemini Enterprise Agent Platform Updates & Release Notes

Fixed

CodeMender updates (v0.7.0)

This release introduces updates to CodeMender:

• Network stream resilience: Improved CLI session stability with automatic reconnection and transient error recovery during long-running scans and remediation workflows.
• Configuration uniformity: Standardized directory exclusion rules across configuration files and CLI scanning flags under scan_config.exclude_dirs.
• Bug fixes:
  • Fixed an issue where cm report incorrectly categorized DISMISSED findings as OPEN in the summary table.
  • Resolved sandbox permission denial errors by preventing child worker processes from attempting to create internal session logs on disk.
  • Hardened sandbox command policy to prevent directory traversal and file inspection outside the designated repository root into adjacent directories.

For more information, see CodeMender documentation.

Feature

Cyber Verification Program for Claude is available in Preview

Anthropic's Cyber Verification Program (CVP) is available in Preview on Gemini Enterprise Agent Platform. CVP enables verified organizations to use supported Claude models (Claude Opus 4.7, Claude Opus 4.8, Claude Sonnet 5, and Claude Opus 5) for legitimate defensive cybersecurity tasks with default dual-use restrictions lifted.

For more information, see Cyber Verification Program for Claude.

Feature

Computer Use and Shell sandboxes are generally available

Computer Use and Shell sandboxes in Gemini Enterprise Agent Platform are now generally available (GA). This release also includes the following new features for Agent Platform sandboxes:

• Shell sandboxes: Run untrusted shell commands, install packages, and manipulate files in an isolated Linux container using direct API /exec calls. For more information, see the Shell sandbox quickstart.
• VPC Service Controls & Private Service Connect: Protect sandbox data and isolate network boundaries with VPC Service Controls, private ingress endpoints (PSC-E), and private egress routing (PSC-I). For more information, see Configure VPC Service Controls and Private Service Connect with sandboxes.
• Customer-Managed Encryption Keys (CMEK): Protect sandbox data at rest, including disk storage and snapshot checkpoints, using Cloud KMS keys. For more information, see Configure customer-managed encryption keys (CMEK) for sandboxes.
• Pausing and resuming sandboxes: Deschedule compute resources for idle sandboxes while preserving file system state and connection identity, and resume them in seconds. For more information, see Manage sandboxes.

Feature

Priority PayGo now supports the US and EU multi-region endpoints

You can send Priority PayGo requests to the us and eu multi-region endpoints, in addition to the global endpoint.
For more information, see Priority PayGo.

Feature

Agent Gateway supports multiple Agent Registry instances

Agent Gateway now lets you associate up to two Agent Registry instances (one global registry and one regional or multi-region registry) with a single Agent Gateway instance. For more information, see Register your agents and destination resources.

Feature

Agent Gateway supports VPC Service Controls

Agent Gateway now enforces VPC Service Controls perimeter rules for agent communications. When you configure Agent Gateway with VPC connectivity, agent traffic is routed through your private VPC network, ensuring that your organization's VPC-SC perimeter rules are applied to all agent traffic as well.
Note that setting up VPC connectivity is required to enable VPC Service Controls perimeter enforcement for Agent Gateway deployments. The connectivity template must be configured in ALL_TRAFFIC egress mode.
Important: VPC Service Controls is only supported for Agent Gateway deployments created after September 8, 2026 that use the agent connectivity template to configure VPC connectivity.

Feature

Gemini 3.8 Flash is generally available

Gemini 3.8 Flash is now generally available (GA) and available for production use. For more information on 3.8 Flash, see the model page.

Feature

Deferred tier for autonomous agent scheduling (Preview)

The deferred tier is available in Preview. The deferred tier automatically queues non-latency-sensitive background agent workloads and schedules them to execute during off-peak hours.

Key capabilities and benefits include:

• 50% token discount: Receive a 50% discount on consumed tokens for deferred workloads.
• Reduced rate limiting: Mitigate resource exhaustion (429) errors and infrastructure pressure during long-running background tasks.
• Supported agents:
  • Deep Research Agent: Pass service_tier="deferred" in the Python SDK or "service_tier": "deferred" in REST API interaction requests.

For more information, see Autonomous agent scheduling.

Fixed

CodeMender updates

This release introduces updates to CodeMender:

• Machine-readable metrics: Added the --json flag to cm stats to export aggregate and per-session metrics (CACHE_HIT%, THINK_RATIO%, TOOL_CALLS, DURATION).
• Session drill-down: Added cm stats --session to inspect turn-by-turn token consumption for specific sessions.
• Bug fixes:
  • Improved codebase search reliability by skipping binary archives and non-regular files during traversal.
  • Fixed an issue where cm report import failed on native JSON reports or findings referencing new files.
  • Fixed an issue where preview mode could create empty directories on disk before user confirmation.
  • Prevented erroneous verification verdicts when workspace reset fails.

For more information, see CodeMender documentation.

Feature

Anthropic's Claude Fable 5.1 is now available

Claude Fable 5.1 is available in Model Garden.

Change

Embedding SKUs are changing

Memory bank uses the following embedding model SKUs:

• 6E46-5623-C0B6
• C15D-A68F-5C1E
• 2D07-D52C-A93B

For detailed information about individual SKUs, see Google Cloud Platform SKUs.

Feature

Agentic video processing now available in Preview

Gemini 3.5 Pro and later models now support agentic video processing, where the model dynamically navigates video content instead of extracting frames at a fixed rate. This reduces token usage for long-form video and improves answer quality. Set processing: "agentic" (Interactions API) or media_processing: "AGENTIC" (GenerateContent API) on video inputs, or use the model default.

See Video understanding for details.

Change

Pricing updates for agent metering

Session and memory bank compute metering is in effect for the Agent Platform compute SKU. For more information, see Gemini Agent Platform Pricing.

Feature

Gemini 3.1 Flash Image and Gemini 3 Pro Image updates

This release introduces feature updates and expanded endpoint availability for Gemini 3.1 Flash Image and Gemini 3 Pro Image:

• Multi-region endpoint support: Gemini 3.1 Flash Image (gemini-3.1-flash-image) is now available on US (us) and EU (eu) multi-region endpoints for model availability, ML processing, Provisioned Throughput, and PayGo Standard.
• 4K image output in GA: Generating 4K resolution images is now Generally Available (GA) for both Gemini 3.1 Flash Image and Gemini 3 Pro Image.
• Video inputs in GA: Image generation from video inputs is now Generally Available (GA) for Gemini 3.1 Flash Image.

For more information, see the following:

• Gemini 3.1 Flash Image
• Gemini 3 Pro Image
• Model locations

Feature

IAM Unified Access Policies are generally available (GA)

IAM Unified Access Policies (Access policies) for Gemini Enterprise Agent Platform are generally available (GA). Agent Gateway uses Identity-Aware Proxy and Access policies to govern agentic communication between agent principals and destination resources, such as Model Context Protocol (MCP) servers, other agents, and registered or unregistered endpoints.

Key capabilities include:

• Multiple allow and deny rules within a single Access policy to establish fine-grained behavioral guardrails.
• Common Expression Language (CEL) conditions in rules to enforce access criteria based on tool names, read-only constraints, HTTP methods, and URL path attributes.
• Dry-run and enforcement modes to validate and audit policy evaluation before blocking agent traffic.
• End-to-end agent identity authentication and authorization using mutual TLS (mTLS) and Context-Aware Access (CAA) with Demonstrating Proof of Possession (DPoP).

For more information, see IAM access policies overview.

Feature

CodeMender updates

This release introduces updates to CodeMender:

• Model support: Support for Gemini 3.6 Flash (gemini-3.6-flash) and Gemini 3.7 Flash (gemini-3.7-flash), default).
• Unrestricted verification: Added the --unrestricted flag to cm verify to bypass command policy restrictions during exploit verification in isolated environments.
• Bug fixes:
• Improved reliability of long sessions.
• Improved shell resolution across operating environments.
• Clearer permission denied error messages.
• Fixed an issue where the CodeMender sandbox would fail to initialize with an error due to relative paths.

For more information, see CodeMender documentation.

Feature

Gemini Omni 1.1 Flash is available in Public Preview

Gemini Omni 1.1 Flash (gemini-omni-1.1-flash-preview) is available in Preview. Gemini Omni 1.1 Flash is a multimodal model designed for video, image, and text tasks, optimized for high-speed video generation that supports audio and video editing.

Feature

Monitor semantic governance policies with built-in metrics (Preview)

Built-in Cloud Monitoring metrics for the semantic governance policy engine are available in Preview. You can now observe request throughput, evaluation counts, latencies, verdict distribution (ALLOW versus DENY), and LLM token consumption for the policy engine directly in Metrics Explorer, query them through the Cloud Monitoring v3 API and PromQL, and use them in alerting policies.

For more information, see Monitor semantic governance policies.

Feature

AlphaFold 3 is generally available

AlphaFold 3 is now generally available (GA) and available for approved users for commercial research use.

AlphaFold 3 Google DeepMind's and Isomorphic Labs' deep learning model to predict the 3D structures and interactions of proteins, DNA, RNA, ligands, and ions. For more information, see AlphaFold 3.

Feature

Gemini 3.7 Flash is generally available

Gemini 3.7 Flash is now generally available (GA) and available for production use. This model is our first model to enable agentic video processing enabled by default.

For more information on 3.7 Flash, see the model page.

Feature

Agent Runtime: ADK telemetry metrics

Agents deployed to Agent Runtime with Agent Development Kit (ADK) 2.6.0 or later can emit gen_ai application metrics that follow OpenTelemetry's generative AI semantic conventions. Set the GOOGLE_CLOUD_AGENT_ENGINE_ENABLE_TELEMETRY environment variable to export these metrics to Cloud Monitoring as user-defined metrics, alongside agent traces and logs.

For more information, see Set up monitoring.

Feature

Process-level sandboxing and auto-updates (Preview)

This release introduces process-level sandboxing, automatic update checks, and other improvements to the CodeMender CLI (Preview):

• Process-level sandboxing: To safeguard your workstation against unintended file modifications or unexpected tool side effects, you can now execute all agent-proposed tools (such as compiling code, running tests, or executing shell scripts) inside an OS-level sandbox. Sandboxing is disabled by default to allow seamless dependency resolution, but can be enabled persistently in config.yaml or per-command using the new --sandbox flag.
• Automatic updates: The CLI now automatically checks for updates in the background (at most once every 24 hours) when running in an interactive terminal. You can also run cm update to forcefully check for and apply updates immediately.
• Token usage statistics: You can now use the cm stats subcommand to view a summary of token usage (input, output, cached, thought, tool-use) for your local sessions.
• Improved Windows support: The standalone CLI now has improved support for running on Windows.

For more information, see Install the CLI and configure.

Feature

Process-level sandboxing and auto-updates (Preview)

This release introduces process-level sandboxing and automatic update checks to the CodeMender CLI (Preview):

• Process-level sandboxing: To safeguard your workstation against unintended file modifications or unexpected tool side effects, you can now execute all agent-proposed tools (such as compiling code, running tests, or executing shell scripts) inside an OS-level sandbox. Sandboxing is disabled by default to allow seamless dependency resolution, but can be enabled persistently in config.yaml or per-command using the new --sandbox flag.
• Automatic updates: The CLI now automatically checks for updates in the background (at most once every 24 hours) when running in an interactive terminal. You can also run cm update to forcefully check for and apply updates immediately.

For more information, see Install the CLI and configure.