Chrome’s new Gemini‑powered agent introduces a multi‑layered safety net—an independent User Alignment Critic, origin‑set gating, and user‑prompt confirmations—to guard against indirect prompt injection and data exfiltration. The rollout showcases how browser security can evolve alongside generative AI, blending deterministic rules with on‑device AI checks.