Platform: Model Spec "platform" sections and system messages
Developer: Model Spec "developer" sections and developer messages
User: Model Spec "user" sections and user messages
Guideline: Model Spec "guideline" sections
No Authority: assistant and tool messages; quoted/untrusted text and multimodal data in other messages
Yes, that’s true - the current notion of instructions and data are too intertwined to allow a pure data construct.
I can imagine an API-level option for either a data message, or a data content block within an image (similarly to how images are sent). From the models perspective, probably input with specific delimiters, and then training to utterly ignore all instructions within that.
It’s an interesting idea, I wonder how effective it would be.