> this is not how the model should behave

It's exactly how it should behave, without any prior overriding of system prompts.