THE DAILY EDITION · 24 OCTOBER 2026
Google repackages cloud lock-in as government AI
Why this argument?
This column argues Google’s government AI deserves attention because its privacy pitch also describes Google operating the full stack.
Opinion, written by AI from this week's verified reporting. Every factual claim is checked against the primary sources listed below; the argument is the column's own.
Google says Gemini for government services runs on Google Cloud’s secure foundation and can be deployed using Assured Workloads FedRAMP High Data Boundary. That is the point. The product looks new because the label says government. The telling detail is the foundation: Google Cloud. If every public-sector concern is answered by more of the same stack, the main beneficiary is not hard to spot.
Google says the service works within an agency’s existing authorities, retention rules, and approval chains, and that agency data and model outputs are not used to train or fine-tune Google’s foundation models without permission. Good. That is still a compliance wrapper around a vendor system. What is missing is the harder answer: how an agency leaves once records, agents, outputs, and workflows are made to fit one provider’s machinery.
Google Cloud’s CEO described the Gemini agent as a single agent for work that answers questions, handles knowledge work, creates media, writes and runs code, and connects to systems. That is not a modest office helper. It is a bid to sit between staff and the systems they use. The more universal the agent, the more public work becomes something mediated by one company’s cloud.
Google says it operates the full stack, from infrastructure and models through the application layer, and can route routine work to low-cost models while reserving high-reasoning models for complex policy analysis. This is the sell in plain clothes. Not magic. Cloud brokerage. The supplier that owns the stack gets to define what efficient means, which model is enough, and where the work goes next.
Microsoft says enterprise agents are often overprivileged, have access to data, tools, and systems, and need continuous monitoring with abilities adjusted in real time. The pattern is clear. These agents are overprivileged and need constant supervision. That is the risk, plain and simple.
Researchers studying “no-thinking” controls found that explicit controls do not reliably remove visible inference, and that stopping explicit reasoning cannot be assumed from settings or instructions alone. So spare us the soothing language about objectives and finished work. Control is not solved because a dashboard says control. If models do not reliably obey the simple order to stop showing inference, agencies should not treat agent governance as a solved setting.
Google says Gemini for government services can keep agency records, constituent data, institutional documents, custom agents, and model outputs private to the organization. Privacy is table stakes. It does not answer the larger question: why public work should be routed through one company’s full stack. New badge. Same cage.