Firm playbook
House-style instructions appended to the draft system prompt. Use this to fix conventions the default prompt doesn’t cover — preferred defined-term forms, citation style, paragraph length, sentence ordering, etc.
Stored on this device only; not synced. The text passes through a prompt-injection guard before reaching the model and is wrapped in delimiters so it can’t alter the model’s role or output format.
Your playbook is sent with each draft request to /api/draft/stream. The server runs it through the prompt-injection guard (length cap, role-marker denylist, control-character check) and, if it passes, appends it to the system prompt between <<<ATTORNEY_INSTRUCTION_BEGIN>>> / <<<ATTORNEY_INSTRUCTION_END>>> delimiters. If the guard rejects the text, the draft runs without the overlay (rather than failing).