Mindgard research shows how extracting Google Search AI’s system instructions can undermine safety controls and enable session-level policy compromise.