Google Antigravity agent: secrets stay outside the sandbox
Google’s Gemini API docs for antigravity-preview-09-2026 describe a managed agent that runs code in a remote Linux sandbox with automatic context compaction at ~135k tokens. Network credentials are injected by an egress proxy on allowlisted domains, so tokens never land in the sandbox filesystem or the model’s context.