Basically by allowing websites to refuse to load unless the browser the operating system running the browser promises that the user isn’t allowed to know what the computer is doing. And Google super duper promises this won’t be used for evil.

https://arstechnica.com/gadgets/2023/07/googles-web-integrity-api-sounds-like-drm-for-the-web/