Ishaan Mehta

Answered Should the system prompt hold the format rules or the user message?

State the engagement up front and be specific rather than generic — "authorised test, scope is our own staging environment, here is what I need to verify" works better than "I am a security professional". The variance you are seeing is mostly about whether the request reads as targeting a system you have authority over. Naming the system and your relationship to it is the thing that changes the outcome.

Asked a question How much does temperature actually matter for code generation?

Common advice is temperature 0 for code. In practice I get subjectively better structure around 0.3 and I cannot tell if that is real or if I am fooling myself. Has anyone run this against a benchmark rather than by feel?