Google Workspace’s continuous approach to mitigating indirect prompt injections