Original Euangelion schematic; CC BY 4.0. Source facts are attributed; no third-party artwork or trademarks are reproduced.

Asset: oct28-exec-agent-credential-boundary.svg
Created: 2026-10-28
Identity: Agent sandbox on left contains tools and files. Calls cross a gateway, and a credential enters the outbound path outside the sandbox before reaching a service.
Source basis:
https://cloud.google.com/blog/topics/ai-infrastructure/agent-compute-engine-deep-dive
https://cloud.google.com/blog/topics/ai-infrastructure/introducing-agent-compute-engine-and-expanded-agent-governance

Limitations: Google’s proposed architecture injects backend credentials outside the agent sandbox. The drawing shows that credential boundary, not proof that every permitted action is safe. Customer preview was announced for the coming months.
License: https://creativecommons.org/licenses/by/4.0/