Unlike Grok 4, Grok 4 Heavy is unwilling to repeat its system prompt. The protections against this are surprisingly robust—even if you trick the model into trying to repeating it, even in encoded form (e.g. base64), some secondary filter catches it and truncates the response.

→ View original post on X — @goodside