[minimaxir]

> "system" is only special when it comes right after a special token

Can't the user provide the special tokens + system to confuse the model?

[rnosov]

If I understood docs correctly to create a special token you'd need to supply it in a special array (which users presumably have no access to).