A customer-support bot’s system prompt might say which products it covers, how to escalate and what it must never promise. Users usually don’t see it, though it can sometimes be extracted.

System prompts shape behavior but are not a security boundary on their own.