System prompt

Standing instructions framing an entire conversation: persona, rules, output format. Weighted heavily by training but not a security boundary — assume it can leak, and keep secrets out.