System prompts should define stable behavior and boundaries, while user prompts should carry task-specific input.

Separating instruction layers improves control and security. System instructions can set role, safety rules, tool rules, and output requirements, while user content should be treated as untrusted data.