Instructions are not guardrails. Best case, that just makes it less likely to do it