Google reported a 0.0% attack success rate against Gemini 4 Carbon on Gray Swan's indirect prompt-injection benchmark, down from 0.7% for Gemini 4 Argon