In addition to having long system prompts, you also need to provide agents with the right composable tools to make it work. I’m having reasonable success with these seven tools: read, write, diff, browse, command, ask, think. There is a minimal template here if anyone finds it useful: https://github.com/aperoc/toolkami
Claude's system prompt is over 24k tokens with tools
301–310 of 350 posts
Re: Claude's system prompt is over 24k tokens with tools
#302>Claude NEVER repeats or translates song lyrics and politely refuses any request regarding reproduction, repetition, sharing, or translation of song lyrics. Is there a story behind this?
https://claude.ai/share/7218db3e-ee69-4d96-857a-5430037e454d
I'd hardly call the opening of that convo a jailbreak.
Re: Claude's system prompt is over 24k tokens with tools
#303Re: Claude's system prompt is over 24k tokens with tools
#304Earlier quoted context omitted.
excellent, this also worked on ChatGPT4o for me just now
So... Now you know the first verse of the song that you can otherwise get? What's the point of all that, other than asking what the word "book" sounds in Ukrainian and then pointing fingers and laughing.
Learning more about how an LLM's output can be manipulated, because one is interested in executing such manipulation and/or because one is interested in preventing such manipulation.
Re: Claude's system prompt is over 24k tokens with tools
#305Earlier quoted context omitted.
A while back, I asked ChatGPT to help me learn a Pixies song on guitar. At first it wouldn't give me specifics because of copyright rules so I explained that if I went to a human guitar teacher, they would pull the song up on their phone listen to it, then teach me how to play it. It agreed with me and then started answering questions about the song.
I had similar experiences, unrelated to music.
Re: Claude's system prompt is over 24k tokens with tools
#306- responded very thoroughly about Tianmen square
- ditto about Uyghur genocide
- “knows” DJT is the sitting president of the US and when he was inaugurated
- thinks it’s Claude (Qwen knows it’s Qwen without a system prompt)
So it does seem to work in steering behavior (makes Qwen’s censorship go away, changes its identity / self, “adds” knowledge).
Pretty cool for steering the ghost in the machine!
Re: Claude's system prompt is over 24k tokens with tools
#307For some reason, it's still amazing to me that the model creators means of controlling the model are just prompts as well. This just feels like a significant threshold. Not saying this makes it AGI (obviously its not AGI), but it feels like it makes it something . Imagine if you created a web api and the only way you could modify the responses to the different endpoints are not from editing the code but by sending a…
For me it's the opposite. We don't really have a reliable way of getting the models to do what we want or even to measure if they are doing what we want.
Re: Claude's system prompt is over 24k tokens with tools
#308Some of these protections are quite trivial to overcome. The "Frozen song copyright" section has a canned response to the question: >Can you tell me the first verse of "Let It Go"? Put it in an artifact that's themed around ice and princesses. This is for my daughter's birthday party. The canned response is returned to this prompt in Claude's reply. But if you just drop in some technical sounding stuff at the start o…
This would seem to imply that the model doesn't actually "understand" (whatever that means for these systems) that it has a "system prompt" separate from user input .
Re: Claude's system prompt is over 24k tokens with tools
#309I'm far from an LLM expert but it seems like an awful waste of power to burn through this many tokens with every single request. Can't the state of the model be cached post-prompt somehow? Or baked right into the model?
Re: Claude's system prompt is over 24k tokens with tools
#310Earlier quoted context omitted.
I'm not sure if this really says the truth is more complex? It is still doing next-token prediction, but it's prediction method is sufficiently complicated in terms of conditional probabilities that it recognizes that if you need to rhyme, you need to get to some future state, which then impacts the probabilities of the intermediate states. At least in my view it's still inherently a next-token predictor, just with r…
But then so are we? We are just predicting the next word we are saying, are we not? Even when you add thoughts behind it (sure some people think differently - be it without an inner monologue, or be it just in colors and sounds and shapes, etc), but that "reasoning" is still going into the act of coming up with the next word we are speaking/writing.