On Thursday, October 8, Google Cloud CEO Thomas Kurian unveiled a “universal” Gemini agent at the Gemini at Work 2026 keynote. It’s an enterprise product, not a coding tool, but it matters to this blog for two reasons: it can write and run code, and it openly routes some work to a competitor’s model.

What was announced

From Android Headlines, Constellation Research and CBS News:

  • Delegation. You hand it a task and get finished work back. It can create sub-agents, described as temporary, job-specific agents that each have their own identity and can work together over several days.
  • Reach. It works across Google Workspace, Microsoft 365, Slack, and tools like Jira, Salesforce and ServiceNow, keeping project context across desktop, mobile and web.
  • Memory. It builds memory and skills from the tasks it receives.
  • Models. Smart routing sends quick jobs to lighter models such as Gemini Flash and harder reasoning to heavier ones, including Anthropic’s Claude. Google says other closed and open models are coming later.
  • Controls. Agents get distinct identities, permissions and audit trails, plus sandboxing and real-time spending caps. Sub-agents can only open files shared with them. Per-person caps are described as arriving “in the coming weeks.”

What isn’t settled

  • It’s a private preview for select Gemini Enterprise subscribers. Constellation says general availability is expected around late October or early November. Early customers named are On, Shopify and PayPal.
  • Pricing is consumption-based with no separate product tier, and the Workspace usage model “has not been finalized.”
  • Evidence is thin. Constellation notes the account relies largely on Google’s own claims, with no independent testing and no customer outcomes beyond the three names.

The part I find interesting

Giving each sub-agent its own corporate identity is a governance idea I haven’t seen in many coding tools. If an agent has its own account, its actions can be audited and its access can be cut off without touching a human’s login. That connects to the Wikimedia story I wrote up on the 8th: the safest agent is the one whose permissions are narrow and visible.

Also notable: a Google flagship product shipping with Claude as one of the engines underneath. It suggests the “pick one model” era of agent products is giving way to routing. I looked at a similar bundling move from Microsoft in this post.

For now there’s nothing to try unless you’re an enterprise customer. Watch for the general-availability date and the actual pricing.

Sources: Android Headlines, Constellation Research, CBS News.