how do those guard rails work? does the system notice you doing it and not put that in the context or do they just have something in the system prompt

I suppose it‘s the latter + maybe some finetuning, it’s definitely not like DeepSeek where the answer of the model get‘s replaced when you are talking something uncomfortable for China