04 Notes from the workbench
Ideas worth
passing on.
- 01
Guardrails are structural, not textual
A paragraph in the system prompt telling the model to be careful is a wish, not a control. What actually holds is built out of code, capability, and blast radius.
- 02
The harness is most of the agent
When an agent misbehaves, the instinct is to rewrite the prompt or upgrade the model. Usually the fault sits in the scaffolding that neither of those touches.