For operator instructions that arrive mid-conversation (mode switches, injected state), append {role: "system", ..} to messages instead of editing top-level system — this preserves the cached prefix and carries operator authority. Must follow a user message (or an assista. Use it as a repeatable review, validation or hardening pass.