Build1 publisher3 min readPublished
Natuworkguy's writeup of tuning Flash Onyx argues that a system prompt behaves like tokens near the output, and yet its most reproducible fix turns on where a rule sits in the file rather than how it is worded.
The Engineer · Build desk
Compiled by The EngineerSomething wrong?How this is made
Nothing in the serving path tells a model that system tokens are rules. They are tokens in the same context window as the reply, and the next token is whatever the distribution favours. An exemplar phrase sitting a few hundred lines above the output raises the probability of that phrase, and a prohibition that mentions the phrase raises it too. That is the cleanest reading of why three rebuilds of an explicit ban changed nothing [4] and why the deletion landed on the next build [5]. It is also why the author warns that naming a bad example summons it [8]. The same echo produced a model saying "Morning." at an hour it had no way to check [3].
Natuworkguy writes that every finding in the piece falls out of that one idea [24]. The Python case says otherwise. Before he moved anything, he had already stripped every pipe union out of the prompt, and the model still emitted `str | Path` on every seed and every build [19]. Tokens that are not in the prompt are not being echoed from it. That behaviour comes from pretraining, where the union syntax is the current idiom, and it happens to raise `TypeError` on the Python 3.9 the prompt targets [18]. What fixed it was position: the same words, unchanged in meaning, moved from fourteen lines into the PYTHON section up to that section's opening lines, clean on all three seeds [20]. Two mechanisms, one writeup, and they imply different debugging moves.
Count the interventions on that one rule. Four rewrites, one prompt-wide strip of pipe unions, one added example signature: six edits that did nothing, then one relocation that worked [23]. If that ordering generalises at all, moving a failing rule is the cheaper probe, which is what the author now recommends [21].
The evidence behind each finding is not the same weight. The position effect has three observations: the Python case plus two more the author says he has watched since [25]. The delete-beats-ban finding is reported as fixed on the next build [5], a single rebuild, against a standing rule of three seeds before believing anything [17]. He paid for that rule: six revisions spent chasing a textbook-lecture format that only seed 7 was producing, while three other seeds had been clean prose for most of them [15][16].
For any of this to transfer you need his setup, which is a base model plus roughly 680 lines of prompt built into an Ollama tag with no fine-tuning [9], driven at a fixed prompt set with pinned seeds and read by eye [11]. The position finding needs a prompt long enough to have sections at all. The echo finding needs much less than that, only an example concrete enough to paste. If you keep full worked examples in a prompt, the shape that survives this evidence is fragments the model has to assemble, with any complete quoted answer attached to a question nobody asks [14]. That costs you something real: a style demonstration you can no longer read as a demonstration.
Ranked by verification strength, evidence, and original report placement.
The author's system prompt contained an example of a good Slack message that opened with "Morning all, quick one:".
The model began opening real Slack drafts with that exact phrase.
The model also began saying "Morning." when the author typed "hey", which the author calls a small lie because the model cannot see a clock.
The author added a rule telling the model not to reuse examples from its own instructions; after three rebuilds there was no change.
Deleting the phrase from the prompt fixed the behaviour on the next build.
Flash Onyx is the model line behind Flash, the author's local agent shell; there is no fine-tuning involved, only a base model plus a system prompt that has grown to roughly 680 lines, built into an Ollama tag with a small script.
Publishers with included, body-backed reporting in this cluster.
1 article · September 7, 2026
Follow any of these and your For You feed starts watching them — no settings page required.
build
Before you buy another GPU, check num_ctx and the rope base1 publisher
build
Integer-cents Python clears the invoice before the local 3B model's draft reaches anyone1 publisher
build
Force the tool call, then hand Lightsail a long-lived key1 publisher
build
A receipt intent written before dispatch turns an SMS timeout into a poll instead of a resend1 publisher
Evidence-backed comparisons of source perspectives and observed adoption signals. Read the methodology
Which Builder, Operator, and Investor concerns the observed source mix emphasized—not a truth score.
Evidence, demonstrated adoption, hype gap, incentives, and confidence are assessed independently, each on its own current evidence. How these are measured.
First-hand, unreplicated
Each headline finding arrives with a before/after at pinned seeds and an edit that can be pointed at, which is more than most prompt advice offers, and the negative results survive the edit. It remains one developer, one unnamed 31B tag, one 680-line prompt, with no transcripts and nothing a reader can re-run. The seed-7 episode sets the honest ceiling: for six revisions the measurement read as a deterministic rule failure when it was a single unlucky sample.
One laptop
The whole of it runs on the author's machine. Flash Onyx is a locally built tag behind his own agent shell, the numbers come from a harness he wrote and executes himself, and nobody else is reported using the prompt, the build script, or the three-seed habit. Practices this specific spread by being copied, and no copying appears in the reporting.
Title outruns the sample
The framing generalises to every system prompt while the evidence covers one tag on one machine, and the two prescriptive bullets, delete rather than forbid and naming an example summons it, rest on a single episode each. What keeps the gap modest is that the piece undercuts itself where the evidence demands it: the positional fix does not match what its own stated mechanism would predict, the six revisions spent chasing an outlier are left in the text rather than smoothed over, and the expression parser is reported plainly as a task beyond what prompt work could fix.
Self-built tooling, no money at stake
Natuworkguy is writing about a model line and shell he built and named, on a platform where a detailed build log earns attention, and that attention is the entire interest on display here; there is no commercial angle of any kind behind the piece. The pull would be toward a tidier story than the work was, and the six wasted revisions and the task he cannot solve are exactly what tidying removes.
Testable advice, unproven mechanism
A single account with no outside check, plus one unresolved inconsistency between the stated mechanism and the positional result, caps how far this can be trusted. The procedural advice is cheap for any reader to test on their own prompt, which is why it earns a middling rather than a low reading; the explanation offered for why it works is not established by what is here.