Two weeks ago at Google Cloud Next ’26 in Las Vegas, Google did something the enterprise AI industry has been dancing around for the better part of two years: it made agentic AI governance a native product feature, not an afterthought.
The centrepiece announcement was the Gemini Enterprise Agent Platform, pitched as the successor to Vertex AI and described by Google as a comprehensive platform to build, scale, govern, and optimise agents. What made it notable wasn’t the model access or the TPU upgrades, significant as those are.
It was the architecture underneath: every agent built on the platform gets a unique cryptographic identity for traceability and auditing, while Agent Gateway handles oversight of interactions between agents and enterprise data. Governance, in other words, ships with the product.
That design choice is a direct response to a problem that has quietly been undermining enterprise AI deployments across the board.
The governance gap that no one wants to talk about
A survey of 1,879 IT leaders by OutSystems, released in April, puts the numbers plainly: 97% of organisations are already exploring agentic AI strategies, and 49% describe their own capabilities as advanced or expert. Yet only 36% have a centralised approach to agentic AI governance, and just 12% use a centralised platform to maintain control over AI sprawl.
That is an 85-point gap between confidence and actual control, and it is not improving fast enough. Gartner’s 2026 Hype Cycle for Agentic AI frames the same tension differently. Only 17% of organisations have actually deployed AI agents to date, yet more than 60% expect to do so within two years, the most aggressive adoption curve Gartner has recorded for any emerging technology in the survey’s history.
The hype cycle places agentic AI squarely at the Peak of Inflated Expectations, with governance, security, and cost-management capabilities still maturing well behind deployment intent. The production reality is considerably more sobering. Multiple independent analyses put the share of agentic AI pilots that have reached genuine production scale at somewhere between 11% and 14%. The rest, the other 86% to 89%, have stalled, been quietly shelved, or never moved beyond proof-of-concept.
Governance breakdowns and integration complexity are consistently cited as the primary causes, ahead of any technical shortcomings in the models themselves.
What Google is actually betting on
At Cloud Next ’26, the message from Google was less about model capability and more about who owns the control plane. Bain & Company’s post-event analysis noted that Google is repositioning from model access toward a full agentic enterprise platform, one where context, identity, and security sit at the centre of the architecture, not at the edges.
The strategic logic is coherent. All three major cloud providers only announced agent registries in April 2026, which signals just how early-stage the governance tooling still is across the industry. Google’s move is the most comprehensive response so far, but it also carries a specific implication for enterprises evaluating the platform: deeper integration with Google’s stack is part of the deal.
That tension–between the genuine governance capabilities on offer and the platform commitment required to access them–is what enterprise architects are now working through. Agentic systems multiply identities and permissions at a pace that traditional human-centric identity and access management models were never built to handle.
Once agents start acting across systems, the governance question shifts from which model is approved to what actions a given agent can take, through which identity, against which tools, and with what audit trail.
Google’s cryptographic agent identity and gateway architecture is a direct answer to that question. Whether enterprises are ready to hand Google that level of operational centrality is a different conversation.
Agent washing makes this harder
There is a compounding problem that the governance debate tends to sidestep: a large share of what is currently being marketed as agentic AI is not agentic AI. Deloitte’s research on enterprise AI trends notes that many so-called agentic initiatives are actually automation use cases in disguise: legacy workflow tools with conversational interfaces, operating on predefined rules rather than reasoning toward goals.
The distinction matters because governance frameworks designed for genuinely autonomous agents will not map cleanly onto scripted automation, and vice versa. Enterprises that conflate the two end up with governance structures that are either too restrictive for real agents or too permissive for brittle automation masquerading as intelligence.
Gartner estimates that more than 40% of agentic AI projects could be cancelled by 2027, with unclear value and weak governance cited as the leading reasons. That figure should concentrate minds. The enterprises investing now in governance architecture–audit trails, escalation paths, bounded autonomy, agent-level identity–are building the foundation that will determine whether their agentic deployments survive contact with production.
Google’s Cloud Next platform launch is, at minimum, a forcing function. The tooling for governed agentic systems now exists at scale from a major provider. What remains is the harder organisational work–deciding what agents are actually authorised to do, who is accountable when they get it wrong, and whether the platform holding all of that together is one you are prepared to build on.
See also: SAP: How enterprise AI governance secures profit margins
Want to learn more about AI and big data from industry leaders? Check out AI & Big Data Expo taking place in Amsterdam, California, and London. The comprehensive event is part of TechEx and is co-located with other leading technology events including the Cyber Security & Cloud Expo. Click here for more information.
AI News is powered by TechForge Media. Explore other upcoming enterprise technology events and webinars here.
