Inside Chrome's / Edge's silent 4GB AI install: a complete hands-on investigation

An investigation into Gemini Nano, the on-device language model Google quietly placed inside Chrome, conducted on a stock Windows install of Chrome 147.0.7727.138 stable, extended into a full security and exploit catalog and a parallel analysis of Microsoft Edge's Phi-4-mini install. What follows is a complete forensic, technical, and offensive-security walkthrough, including every working JavaScript exploit path I found, every API output, and the moment the model was caught generating Wikipedia