Google is putting AI agents in separate virtual machines — Sources

Primary sources for Sensemaker's July 14, 2026 brief on Google I/O Connect India's agent-safety announcements: CAPSEM isolation, device-bound sessions, and deterministic payment authorization.