099d31f594
A custom AI-role's text preceded the only SAFETY_FRAMEWORK block and replaced the persona, so a jailbreak in the role text sat before the safety rules. buildSystemPrompt now emits SAFETY both before AND after the persona, with the role/persona delimited as lower-trust (<role_persona note=...>); the default persona is sandwiched too. Context (currently-viewing-page) preserved. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>