[macintux]

I thought the general point is that you can't "force" an LLM to stay within certain boundaries without placing it in an environment where it literally has no other choice.

(Having said that, I'm just a kibitzer.)