What are the limitations of persona prompts?

Personas can drift over long conversations, especially when users push against the persona's constraints. They do not give the model new knowledge, only style and framing. Personas can also be jailbroken by users asking the model to step out of character. For high-stakes applications, combine personas with explicit behavior rules and content filters.