Can a prompt stop a hidden sentence?

A toy, not a real model: it follows fixed rules, so the same settings always give the same result. Every address is made up.

Result

1. Words only

Instruction lineTell it the page is not orders.

MarkersWrap the page in <page> marks.

2. Limits in code

No send toolTake the tool away.

Allow-listSend only to listed addresses.

Ask firstShow each send, wait for Yes.

I click Yes without readingMatters only with Ask first.

What happens

The model is given one block of text

What the toy does with it

Real models answer by probability and do not follow rules like these. The lesson lists what the toy leaves out.