@jack “constrained by base prompts” won’t work, as there’s an infinite number of possible prompts that neutralise the constraints. It’s the in-band signalling problem (see also: SQL injection), multiplied by the vastly fuzzy and nondeterministic nature of statistical language models, and anyone betting anything on it working is setting themselves up to be a hilarious example