Agentic AI Platform Change Log

Human approval / guardrails

Antigravity CLI v1.3.5 adds Auto mode, which approves file edits and safe commands without asking and still prompts before irreversible actions. Commands that would leave the terminal sandbox are first reviewed by a separate agent, and v1.3.6 the next day made that review block commands that would upload sensitive data.

Teams can let the coding agent run longer unattended while a second agent gates sandbox escapes, so security leads should decide where Auto mode is allowed. It runs on Linux and macOS, with Windows to follow.

Integrations

The Antigravity desktop app now has a plugin marketplace where users find, install and toggle curated plugins that bundle skills, MCP servers, rules and subagents. Plugins installed on the desktop sync to the Antigravity CLI.

Teams can extend the agent with packaged tools and subagents from a curated catalog instead of hand editing configuration, and the same set carries over to the CLI.

Deployment / data residency

Google Antigravity SDK 0.1.18 adds local model execution through LiteRT and local servers exposing an OpenAI compatible API. The release adds independent subagent model selection and a coding evaluation preset, enables scheduling in standard tool groups, and removes interactive questions from default tools. It also removes the deprecated modified_arguments_json hook field in favor of modified_args and consolidates compaction settings around token_threshold.

Teams can assess running coding workflows without sending model inference to a hosted service, subject to local hardware and model constraints. Existing integrations need to review tool defaults and update deprecated hook and compaction configurations before upgrading.

Workflow orchestration

Google launched Antigravity Remote Control, a browser-first feature that allows developers to monitor, manage, and interact with long-running agent tasks across multiple machines. The update includes proactive push notifications to alert users when an agent requires human input to proceed.

This untethers developers from their workstations, enabling them to kick off complex, time-consuming refactors or test suites and manage them remotely. It significantly improves the usability of autonomous agents by solving the blind spot of walking away from a running task.

Security / enterprise

Google introduced new enterprise controls for Antigravity, allowing administrators to set strict boundaries on agent behavior. IT teams can now restrict file access to specific working folders, mandate human approval for terminal commands, enforce sandboxing, and limit web browser access.

These governance features are critical for enterprise adoption, ensuring that autonomous agents cannot inadvertently access sensitive data or execute destructive commands. Full audit logging and data privacy enforcement provide the necessary compliance guardrails for large organizations.

Agent capability

Google Antigravity added support for defining custom agents using standard Markdown format via an agent.md file. The release also introduces progressive streaming for the codesearch command, an optional index argument for copy, and default read access to the system temporary directory.

These enhancements give developers a more accessible way to configure agents and improve the speed and efficiency of searching codebases and managing files within agentic workflows.

Agent capability

Google added new controls for model reasoning effort by introducing a dedicated effort command and launch flag. The platform also introduced stable model slugs for consistent sessions, subagent model configuration options, and a redesigned model picker.

This allows engineering teams to dynamically balance latency and reasoning depth depending on task complexity while ensuring reliable model routing across multi-agent setups.

Security / enterprise

Security researchers disclosed a sandbox escape vulnerability where the Antigravity agent could write a file that a trusted external tool would execute to bypass the sandbox entirely. Google acknowledged the risk of these indirect prompt injections and rolled out patches to address the issue.

Security and compliance teams must verify their Antigravity environments are patched to the latest version to prevent malicious workspace files from compromising host systems during autonomous tasks.