IIRC Claude has some kind of mechanism where even though the system prompt is sent from the client, if it’s modified it can trip tamper checks and result in a ban.