Google Agent Compute Engine gives AI agents hardware-isolated microVMs with zero credentials inside, previewing in the coming months.