ARCHITECTING SECURITY FOR AGENTIC CAPABILITIES IN CHROME

Summary from the TLDR AI newsletter

Agentic browsers all face the threat of indirect prompt injection, which can appear anywhere and cause agents to take unwanted actions. Google has invested in a layered defense that includes both deterministic and probabilistic defenses to make it difficult and costly for attackers to cause harm. It created the user alignment critic, which vets an agent's actions using a separate model isolated from untrusted content. It also extended Chrome's origin-isolation capabilities to constrain what origins the agent can interact with.