Google ADK for Go 1.6.0

Apply the Go 1.27 baseline first. These rules describe exactly google.golang.org/adk v1.6.0, whose module declares Go 1.25.0 as its minimum. The agent/remoteagent/v2 and server/adka2a/v2 adapters discussed here belong to this v1 module.

Version and execution limits

• On v1.6.0, which predates the confirmation-request trust checks and A2A transfer controls that v1.6.1 carries and the fetched-card origin and deploy-input validation that v1.7.0 added, keep the compensating controls below in place, and don't assume a later fix is present until go list -m google.golang.org/adk shows a release that has it. ADK lands fixes on its v2 line first and backports some of them to v1 later, so check the v1 release notes for each v2 security fix you rely on.
• Set a positive loopagent.Config.MaxIterations; zero permits indefinite iteration, and the loop itself does not check context cancellation between iterations.
• Bound Runner.Run with a deadline and application-enforced model-call, token, and cost budgets; agent.RunConfig has no maximum-model-call setting.
• Enforce Live session duration, traffic, and cost limits outside LiveRunConfig.MaxLLMCalls, which is declared but not enforced by the v1.6.0 flow. Close LiveSession and cancel its context on disconnect or budget exhaustion.
• Limit model-produced FunctionCall counts before dispatch and enforce concurrency and spending quotas inside tools; the flow starts a goroutine for each call, including resumed calls.

Agent configuration and instructions

• Build llmagent.Config, gemini.NewModel client