Prompt Instructions Fail as Guardrails for RAG Systems

A developer warns that adding 'don't make recommendations' to a prompt does not prevent LLMs from producing verdicts instead of evidence. The instruction is a request, not a structural guardrail, and output drift can shift accountability from humans to the system. The solution is to enforce output contracts that separate evidence from decisions.