BAB is one of several technologies used at Google to mitigate insider risk. By using containerized systems and verifying their BAB requirements prior to deployment, our systems are easier to debug, more reliable, and have a clearer change management process. BAB can be used for many kinds of deploy-time security checks. After deployment, a job is continuously verified for its lifetime, to check that jobs that were started (and any that may still be running) conform to updates to their policies.”]
Source: https://security.googleblog.com/2019/12/protecting-programmatic-access-to-user.html