Infrastructure / GCP
Blueprint
GCP: Containers that scale to zero on Google Cloud
How each member of the cast is served by Google Cloud: agents run as jobs that exist only while they work, with state in object storage.
| Cast member | What serves it on GCP |
|---|---|
| Gatekeeper | Cloud Run services for ingress and egress; VPC with Cloud NAT |
| Keymaster | Secret Manager |
| Executive | Vertex AI |
| Secretary | Cloud Storage bucket for agent memory |
| Landlord | Cloud Run jobs, one per agent, Artifact Registry for images, a service account per agent |
| Auditor | Cloud Storage with a retention policy for sealed ledger checkpoints |
| Treasurer | Cloud Billing export to BigQuery, and the Cloud Run inventory, through a read-only service account |
| Bouncer | No provider service. Runs inside the control plane; identity comes from your OIDC provider |
| Timekeeper | No provider service. A one-minute clock inside the control plane |
| Registrar | Cloud Build for agent builds and skill checks, Artifact Registry, a versioned Cloud Storage bucket for configuration |
| Inspector | Pub/Sub and Cloud Audit Logs for the event bus, OpenTelemetry for metrics and traces |