A chat application needs a consistent instruction that responses should be concise and avoid revealing secrets. Where should this policy normally be placed?

1. In the model deployment's billing tag
2. Only in a random user's last message
3. In the application's governing instructions or system prompt
4. In a public DNS TXT record with no client integration