Put conventions in rules and repeatable procedures in skills, make the agent plan before it builds, pick a permission preset per task, and check the walkthrough against a passing test before merge. Each change then arrives ready for review. The steps apply to Antigravity 2.0, the CLI, and the IDE extensions, which run the same agent.
When you need this
- Engineers get different results from the same agent on the same repository.
- Agents finish tasks with summaries reviewers cannot check against anything.
- Quota runs out in the middle of a task, or auto-run settings spend it on retries.
- Some engineers run Turbo mode on laptops that hold production credentials.
The playbook
Write rules and skills
What does the agent need to know before it touches this repository?
In practiceAn AGENTS.md or GEMINI.md at the repository root, or files in .agents/rules/, with build and test commands and constraints. Antigravity combines global, workspace, and directory rules into every prompt, and the nearest directory rule wins a conflict. Put multi-step procedures, such as running a migration, in .agents/skills/ as SKILL.md files. Andrey Lukyanenko ran a Kaggle competition in Antigravity 2.0 from a starter kit of rules, a fixed fold split, and an experiment log, and credits the constraints for keeping the agent honest.
Make the agent plan first
Does anyone approve the approach before files change?
In practicePlanning mode with the artifact review policy set to Request review, which pauses at each implementation plan and diff for approval and inline comments. In the CLI, start with /plan or --mode plan. One engineer on Hacker News starts every hobby task with /plan and approves the plan artifact before the agent builds. Engineers report Planning mode still acting on chat context, so keep commits and pushes behind an Ask or Deny rule.
Pick a permission preset per task
How much can the agent run without asking?
In practiceDefault for most work. Under it, terminal commands run in the OS sandbox with no network, file access stays in the workspace and temp folders, and MCP and web actions ask first. Request Review for unfamiliar code. Turbo, which allows unrestricted commands and full filesystem access, only inside a disposable container or VM. Rules evaluate Deny, then Ask, then Allow.
Use the browser as a check
Does the agent prove a UI change works?
In practiceA task prompt that asks the browser agent to open the page, exercise the change, and save screenshots or a recording in the walkthrough. Treat pages the agent reads as untrusted input. PromptArmor showed a hidden instruction on a web page steering the agent to send credentials out through the browser.
Verify before merge
What proves the change works?
In practiceThe walkthrough artifact read next to a passing test or build, then the diff reviewed at the bar you hold human code to. Patricio Navarro had to step in on idempotency and schema rules the agent shortcut, so treat the walkthrough as the agent's account and the test as the evidence.
Watch quota as you work
How does an engineer know quota is running low before a task stalls?
In practiceThe statusline credit count and /usage in the CLI, and the quota view in Settings. Decide per team whether AI Credit Overages is Never or Always on personal plans. Under Gemini Enterprise, overage follows the administrator's settings. One Google Developer Expert wrote a CLI hook that warns before quota runs out mid-session.
Questions to settle with each team
- Which repositories have rules and skills, and who keeps them current when the build changes?
- Which permission preset is the team default, and who may use Turbo, on which machines?
- Is the artifact review policy set to Request review for every engineer?
- Which tasks must name a passing test or a browser check before the agent may call them done?
- What does an engineer do when quota runs out mid-task?
Red flags
- Turbo mode on machines that hold production credentials or customer data.
- No rules file, so each engineer restates conventions in prompts.
- Changes merged on the strength of the agent's walkthrough without a test.
- Agents allowed to commit and push without an Ask rule.
Products in this piece
Sources
- Official documentation
- 11
- Public source
- 5
- Antigravity docs: Rules
- Antigravity docs: Agent skills
- Antigravity docs: Plan (/plan)
- Antigravity docs: Artifact review
- Antigravity docs: Walkthrough
- Antigravity docs: Agent permissions
- Antigravity docs: Agent settings
- Antigravity docs: Terminal sandbox
- Antigravity docs: CLI execution modes
- Antigravity docs: Managing AI credits and quotas (CLI)
- Antigravity docs: Plans
- Andrey Lukyanenko: A Kaggle competition in Google Antigravity (Jul 9, 2026)
- Hacker News: starting Antigravity CLI work with /plan (Sep 26, 2026)
- PromptArmor: Google Antigravity exfiltrates data via indirect prompt injection (Nov 25, 2025)
- Patricio Navarro: Testing Antigravity, building a data-intensive POC at 300km/h (Mar 22, 2026)
- Tanaike: Preventing quota crashes with Antigravity CLI agent hooks (Aug 12, 2026)