Blast-radius control for scheduled (cron) runs of an ADK agent — scoped secrets, the headless tool-approval policy, and HITL-gated job creation. Read when an agent runs jobs on a schedule with no human present, when a cron job needs credentials but shouldn't see every env var, when a scheduled tool
Blast-radius control for scheduled (cron) runs of an ADK agent — scoped secrets, the headless tool-approval policy, and HITL-gated job creation. Read when an agent runs jobs on a schedule with no human present, when a cron job needs credentials but shouldn't see every env var, when a scheduled tool call is being denied unexpectedly, or when tuning NUVEL_CRON_HEADLESS_POLICY / NUVEL_CRON_SCOPE_SECR