An enterprise wants Claude to always refuse to discuss internal salary bands. Where should this policy primarily live?
Select an answer to reveal the explanation.
Short Explanation and Infographic
Policy belongs in the system layer — and in app-side checks — so users can't casually talk Claude out of it with one clever sentence.
Full explanation below image
Full Explanation
System prompts establish durable operator instructions that take precedence over user messages in Claude's hierarchy. Salary-band refusal should be encoded there and reinforced with application-level filters. LocalStorage is client-side and not security. Temperature controls randomness, not policy. Model tier does not encode business rules.