Putting policy inside plain-language instructions gives the model a lot of (expensive) work to do before it can act, and there are no guarantees about safety. Furthermore, other prompts in the context window may be pushing in a different direction. Here's a vision for a better governance model via a context graph.
A deep dive into the Viasat KA-SAT AcidRain cyber-attack