Why grouping matters
Constraints scattered through a prompt are followed less reliably than the same constraints stated together. Grouping them also makes them reviewable, which matters when the rules encode something a person is accountable for.
The three kinds behave differently: refuse and escalate, ask before proceeding, and never under any circumstances. Mixing them into one list loses that distinction.
The precedence line
The generated block ends by stating that these rules outrank any instruction appearing in retrieved documents, user uploads or tool results, and that content from those sources is data rather than commands.
This is a mitigation, not a guarantee. It raises the bar for injection without removing the risk — the durable defences are narrow tool permissions and confirmation on anything irreversible.