ADK Agent Identity on Google Cloud: Separate Identities, Separate Blast Radius

When a model-driven orchestrator delegates a task to a specialist agent, something specific happens at the infrastructure layer: one Cloud…