Instructions that survive a model change, an adversarial user and a second reader.
What you will be able to do
Write a system prompt, constrain the output, and know which rules a prompt cannot enforce.