Build zero-trust AI agents with Google's Agent Development Kit

Google open-sourced a runnable zero-trust demo — a customer support and returns agent built with ADK and Gemini — showing how one injected prompt can trigger an unauthorized $10,000 refund or leak host variables. It argues system prompts are soft constraints that fail against jailbreaks, so security must be enforced at the architecture level.