Regulus control plane sits beside Google ADK runtime Four horizontal lanes — Google Cloud data plane, Google ADK runtime, Regulus decision plane, and external GRC systems — with plugin SPI seams connecting ADK to Regulus. Google Cloud — data plane Org Policy · VPC-SC · Assured Workloads · Cloud Audit Logs · CMEK / EKM Google ADK 1.2 — runtime BeforeAgent BeforeModel BeforeTool AfterTool AfterModel Regulus — decision plane Policy BeforeTool Privacy B/A Model Audit AfterTool Kill switch BeforeTool Model risk BeforeModel Residency A/M write External GRC · ServiceNow IRM · OneTrust · MetricStream · webhook

8 ADK BasePlugin implementations

Every plugin extends com.google.adk.plugins.BasePlugin and overrides the callback hooks listed below. Plugins are composable; the same agent can run all eight without ordering issues — Regulus pins the priority order so policy decisions land before audit emissions.

Policy plugin

RegulusPolicyPlugin

Pre-tool-call policy evaluation. Decisions are fail-closed and emit a structured audit event with the matched policy clause.

BeforeAgentCallbackBeforeToolCallback

Privacy plugin

RegulusPrivacyPlugin

PII redaction on inbound prompts and outbound responses; re-redaction on memory writes; configurable patterns per jurisdiction.

BeforeModelCallbackAfterModelCallback

Audit plugin

RegulusAuditPlugin

Append-only audit event emission with optional SHA-256 hash chaining; 24-month retention by default; offline verification via the CLI.

AfterAgentCallbackAfterToolCallbackAfterModelCallback

Kill switch plugin

RegulusKillSwitchPlugin

Identity-backed dual-control kill switch. Two authorised principals collapse the agent's tool surface; events feed the audit chain.

BeforeAgentCallbackBeforeToolCallback

Model risk plugin

RegulusModelRiskPlugin

Tier-aware gating that enforces SS1/23 + ISO 42001 model-classification rules; ties model invocations to validation evidence.

BeforeModelCallback

Data residency plugin

RegulusDataResidencyPlugin

Fail-closed residency enforcement on memory writes and artifact stores; checks the resolved region against the active profile's allowed set.

BeforeAgentCallbackAfterModelCallback

Governance evidence plugin

RegulusGovernanceEvidencePlugin

Routes signed evidence envelopes to ServiceNow IRM, OneTrust, MetricStream, or a generic HMAC webhook with framework citations attached.

AfterAgentCallback

Identity expiry guard

RegulusIdentityExpiryGuard

Short-lived-token enforcement. Rejects tool calls whose Principal's credentials have expired; logs the rejection with structured cause.

BeforeToolCallback

6 ADK service extensions

Service extensions wrap Google-shipped implementations rather than replacing them. RegulusVertexAiSessionService extends VertexAiSessionService — the underlying Vertex session-service contract is intact; Regulus adds residency, retention, and PII checks at the read/write seams.

RegulusVertexAiSessionService

extends VertexAiSessionService

Adds policy + privacy + residency gating to Vertex-managed session state.

RegulusFirestoreSessionService

extends FirestoreSessionService

Same as Vertex variant, against a Firestore session backend.

RegulusFirestoreMemoryService

extends FirestoreMemoryService

Long-term memory with PII re-redaction on write and TTL by retention policy.

RegulusGcsArtifactService

extends GcsArtifactService

Region-pinned artifact writes with residency enforcement and per-bucket CMEK.

RegulusRetentionEventCompactor

extends EventCompactor

Regulation-aware retention. Strictest profile wins; events older than the resolved retention are compacted.

RegulusComplianceBaseComputer

extends BaseComputer

Computer-use surface with policy-gated screen + keyboard access; redacted screenshots.

A2A — Agent-to-agent envelope

Cross-org agent calls travel over ADK's A2A protocol. Regulus wraps the envelope with RFC 9421 HTTP Message Signatures: the calling agent signs request method + URI + body + timestamp; the receiving agent verifies before invoking. Replay-window protection ships as part of the envelope. Ed25519 signing is wired through the SPI but the signing implementation lands in the next milestone — today the surface enforces structure + replay protection.

10 regulation profiles

A profile is a YAML file. Each profile pins the policy clauses, the audit fields, the retention window, the allowed residency, and the framework citations. Multiple profiles compose; conflicts resolve deterministically (strictest retention wins, intersected residency, union of audit fields).

6 governance frameworks

Frameworks are voluntary best-practice standards that internal-audit teams adopt to demonstrate maturity. Regulus emits framework-tagged evidence from the audit chain so coverage is provable on demand.

4 GRC adapters

Every audit event can be routed to one or more GRC tools via the RegulusGovernanceEvidencePlugin. Adapters emit a signed envelope containing the event, the matched policy clause, the framework citations, and the resolved jurisdiction. Configure the adapter once in application.yaml; the routing happens automatically on every event.

ServiceNow IRM

Posts signed evidence envelopes to the ServiceNow Integrated Risk Management module.

OneTrust AI Governance

OneTrust AI Governance asset + activity records, with framework citations attached.

MetricStream

MetricStream Risk Cloud risk events with mapped control catalogue references.

Generic HMAC webhook

Signed POST to any URL. Verify the signature offline with the bundled key.

Where the bytes go

Three places. (1) Cloud Logging for the operational stream — every event written via the standard structured log API. (2) The hash chain — append-only file or object-storage stream, SHA-256-chained, offline-verifiable. (3) Your GRC tool — the configured adapter, signed, with citations. The first two run by default; the third is the audit-evidence loop that makes the rest reconcilable.

Install the CLI and see this run end-to-end →