Comment by dmix

These system prompts are not the only safety layer that these models use. There's other more deterministic filters in place both on input and (streaming) output.