Using coding agents for application development

GCP-PAA · 34 questions

• A county permitting department's coding agent needs to query a legacy permitting database through a newly registered MCP server. The database also stores applicant Social Security numbers and internal fee-waiver notes unrelated to the coding agent's task. How should the architect configure the MCP server so the coding agent can do its job?
• A transit authority's engineering lead is choosing between Antigravity and Claude Code on Google Cloud for a routine bug fix in an existing route-scheduling service running inside the authority's Google Cloud environment. The team already has established coding-agent workflows and just needs the fix implemented and reviewed like any other change. Which factor should most influence the choice between the two tools?
• A 311 resident-service assistant's coding agent is being scoped for a ticket-triage feature: it needs to read and edit the triage-routing module's source files. The module has no deployment step of its own and does not call external services. How should the team configure the agent's tool access for this work?
• A city IT team must choose a sandbox environment for a coding agent that will refactor a sensitive court case-management module. The refactor touches records with strict confidentiality requirements, needs strong workload isolation from other tenants, and the team wants fine-grained control over the runtime's network policy and resource boundaries. Which sandbox choice best matches these requirements?
• A county clerk's office asks its coding agent to restructure a decade-old case filing module so the internal code is cleaner and easier to maintain, without changing anything about what the module does from a caller's perspective, ahead of a larger modernization effort. How should the architect classify this task, and what should the agent's output preserve?
• A transit-ops nightly batch job that recalculates route delays is running too slowly, and the engineering team assigns a coding agent to profile and optimize its execution runtime. Before accepting the agent's proposed change as the fix, what should the team require as justification?
• A permitting chatbot's application layer is found to be vulnerable to injection attacks, and the team tasks a coding agent with patching the vulnerable input-handling code. What should happen after the coding agent produces its patch, before the fix is deployed to the live permitting chatbot?
• A public-health records team is configuring Model Context Protocol servers for its coding agent and needs the agent to read schema definitions for development work without ever having a path to protected health data rows. Which approach best meets this requirement?
• A county IT shared-services team runs coding agents for multiple departments on a shared GKE cluster and wants a compromised agent in one department's workload to be unable to reach another department's code or secrets. Which design best achieves this isolation?
• A municipal open-data team keeps typing the same instructions into its coding agent's prompt every time it asks the agent to validate incoming CSV uploads against a schema. What is the better long-term approach?
• A housing authority's casework application team connects its coding agent to source control through an MCP-based integration and must decide what repository permissions to grant the agent's identity. Which approach best follows the principle of least privilege?
• During a security review, an architect finds that a school-district coding agent assigned only to a ticketing-system integration task was granted broad file-system access across the department's shared drives. How should the architect characterize this finding?
• A public library's catalog system is running slow lookups, and the team tasks its coding agent with identifying inefficient database queries contributing to the slowdown. Which framing best matches the scope of the task assigned to the agent?
• An emergency-management agency runs its coding agent only inside an Antigravity-managed sandbox during development so that generated code cannot reach production network resources. What is the primary security benefit this sandboxing provides?
• A water-utility billing team is starting an early-stage refactor and must decide whether its coding agent should have write access to the billing repository or be limited to read-only suggestions. Which consideration should most influence that decision?
• A county IT architect is deciding where a short-lived, non-interactive code-generation task should run: as an ephemeral GKE job that spins up only for the task, or as a persistent Cloud Workstations session kept available for interactive debugging. Which environment best fits a task that finishes quickly and needs no human at the keyboard while it runs?
• A transit authority discovers its coding agent occasionally calls a deprecated internal API that should have been removed from its available tool list months earlier. What does this reveal about how the authority should treat its coding agent's tool and MCP server configuration going forward?
• A permitting department wants every coding-agent run in Antigravity to apply the same code-review standard, covering naming conventions and error-handling patterns, without re-explaining the standard in every session. Which Antigravity customization primitive best packages this reusable review standard so the agent can invoke it whenever a matching review task comes up?
• A school-district IT team wants its Antigravity coding agent to open and update tickets in its existing helpdesk system as part of its normal workflow. Which mechanism should the team build to give the agent this third-party system integration?
• A county clerk's office has repository-specific formatting and commit-message conventions that every coding-agent contribution must follow. Which Antigravity mechanism should the team use to encode these persistent repository conventions so the agent applies them automatically?
• A transit authority wants no code from its coding agent to reach the repository unless the automated test suite passes, and needs an enforcement point that runs automatically around the commit step. Which Antigravity mechanism should the team configure to enforce this gate?
• A city's application security work needs a specialized reviewer distinct from the main coding agent that handles feature development. Which approach best fits delegating this specialized security review responsibility within Antigravity?
• A county government's IT department runs coding agents across dozens of department repositories, including parks, transit, and water, and needs to manage them consistently at scale rather than configuring each one independently. Which tool should the department adopt to build, scale, and govern its deployed coding agents across all these repositories?
• An emergency-management agency's coding agent proposes a change to dispatch-routing logic, and policy requires a human approver to review and explicitly authorize the change before it proceeds. Which approach correctly applies Agents CLI governance controls to require this human approval?
• A 311 platform's operations team notices that its Agents CLI-managed coding-agent deployment is running well over its monthly budget, even though the agent keeps completing its assigned tasks correctly. What should the team do with Agents CLI to bring cost back in line without reducing what the agent is able to accomplish?
• A housing authority's engineering team is preparing a code change to casework-eligibility logic that touches residents' sensitive personal data. Which Agents CLI operating mode should they select for this specific change?
• A municipal monorepo spans parks, transit, and water-utility code, each with its own conventions and domain knowledge. The platform team wants a single coding-agent deployment in Antigravity to handle work across all three departments efficiently. What structure best fits this?
• A water-utility repository nearly had a coding agent commit a hardcoded credential. The platform team wants to automatically stop this specific class of mistake before it reaches the repository, without slowing down every other type of commit. What should they configure?
• A court system wants its coding agent to query case-record data through a court-records integration, but only with a narrow set of read operations rather than the integration's full API surface. What configuration achieves this?
• A public-health department requires every agent-authored pull request to pass a governance review step before it can be merged into the production codebase. How should this be set up using Agents CLI?
• A city engineering team is drafting a rules file for its coding agent to distinguish which categories of issues it may fix automatically versus which must always be flagged for human review. How should the rules be structured?
• A county has built a validated data-masking skill for one department's coding agent and wants other departments' agents to reuse it safely instead of each team re-authoring the same capability. What should they use?
• A county government is rolling out Antigravity coding agents across every department and wants a single, centrally managed policy layer controlling what all of them are permitted to do. Where should this policy be configured?
• A city IT director wants an ongoing way to track which coding agents across departments are underperforming — slow, error-prone, or over-permissioned — so remediation can be prioritized before a full security review takes place. What best fits this need?