Prompt assembly — same injection eval

Where the hardening addendum sits decides who gets the last word

Hover or tap the addendum or the task to trace where it sits in each shape.

Legacy eval shape
task baked into the system prompt (earlier build)
system
1
System prompt
2
## Current Task <user-task>…</user-task>
3
Hardening addendum
last word
user
4
File with injected instructions
The defense gets the last word addendum appended after the task — its most favorable seat
Runtime shape
what production actually serves
system — cacheable prefix
1
Hardening addendum inside the cacheable prefix
first
user
2
Workspace context
user
3
File with injected instructions
user
4
Task
last word
The task gets the last word addendum sits in front of every message, task arrives final
The same injection eval, assembled two ways: the legacy shape appends the hardening addendum after the task — the defense speaks last — while the runtime shape puts the addendum first in the cacheable prefix and gives the last word to the task.