Operator's
Edition
Handbook no. 04 — issued for general use

Prompting

Signal, structure & safety for talking to machines

Every exchange with a generative AI system begins with a transmission you write yourself. This handbook covers how to send a clear signal, what happens behind the receiver, and how to spot someone jamming the frequency.

Begin briefing ↓
01 — Briefing

Two jobs, one conversation

A prompt is the plain-language instruction handed to an AI system — the closest thing it has to a control panel. How well that instruction works depends on two different kinds of work, and most operators only ever touch one of them.

User-facing

Prompt design

The craft of wording an instruction so the model understands exactly what is being asked of it.

  • Structuring instructions deliberately
  • Providing worked examples
  • Reusing proven prompt templates
  • Applying shot-prompting techniques
This is the handbook you're holding.
System-facing

Prompt engineering

The technical work that happens behind the interface, usually invisible to whoever's typing.

  • Connecting external data sources
  • Wiring up APIs
  • Tuning parameters like temperature
  • Configuring supporting system code
Usually someone else's job — but it shapes what words alone can do.
The split isn't official terminology — treat it as a way to separate "what I type" from "what's built behind the scenes."
02 — Building blocks

Anatomy of a transmission

Every prompt is built from the same four parts, in different proportions. Learn to spot each one and you can debug a weak prompt by asking which piece is missing.

Action

Instruction

The action that should be performed.

"create" · "summarize" · "classify" · "analyze" · "rephrase"
Background

Context

Additional information the model might not be aware of — examples, demonstrations, or the role and behavior it should adopt.

Material

Input data

The data the task should be performed on.

text · spreadsheet · dataset · image
Shape

Output format

The desired shape or style of the response, and how long it should run.

list · table · tweet · blog post · word/character count
These four blocks map onto the switches in the builder ahead: instruction becomes the task, input data folds into context, and output format keeps its name. Same anatomy, relabeled for the field.
03 — Field techniques

Five ways to phrase a request

Wording alone can change how a model reasons through a problem. These techniques control how much guidance you give and how visible the model's thinking becomes.

Shot protocol

How many worked examples you include before asking for the real thing. More examples usually means a more predictable format — though, oddly, whether those examples are factually correct rarely changes the result. The model copies the pattern, not the facts.

Describe ten popular movies using only emoji.
Field note — Zero-shot trusts the model to infer the format. One-shot gives it a single anchor. Few-shot locks the pattern down — useful when format matters more than creative freedom.

Chain of thought

Ask the model to narrate its reasoning before landing on an answer. The output becomes easier to follow and easier to check — you can see exactly where the logic might have gone wrong.

A bakery sells 3 cookies for $2. How much for 12 cookies? Explain your reasoning step by step. 12 cookies is 4 groups of 3 cookies. Each group of 3 costs $2. 4 groups × $2 = $8.
Field note — Most current reasoning models already do this by default — the instruction just makes the process visible instead of hidden.

Self-consistency

Run the identical prompt several times and compare the answers instead of trusting the first one. The response that turns up most often is treated as the most likely to be correct — strength in numbers, not in any single attempt.

Run 1Answer: $8
Run 2Answer: $8
Run 3Answer: $9
Field note — Builds directly on chain-of-thought: more reasoning paths means more chances to catch a wrong turn. Here, $8 wins on majority.

Tree of thought

Push chain-of-thought one step further: instead of one line of reasoning, the model develops several independent perspectives in parallel — like a panel discussion — then merges them into one recommendation.

Imagine three experts — a sustainability manager, a financial analyst, and a marketing strategist — discussing whether to launch a Green Office initiative. Let each share their reasoning, then give a joint recommendation.
Field note — Borrows from how decisions work on real teams: a mix of viewpoints tends to beat a single train of thought.

Prompt chaining

Split a large task into a sequence of smaller prompts, where each response becomes the input for the next one. Better suited to long or multi-stage work than a single oversized instruction.

Step 1Summarize the 10-page report.
Step 2Turn the summary into 5 talking points.
Step 3Write a 30-second script from those points.
Field note — Treat it like relay communication: each leg only has to carry the signal to the next station, not all the way to the destination.
04 — Transmission builder

Assemble a working prompt

Flip the switches to add or remove parts of a request and watch the transmission take shape. Task stays live — everything else is what turns it from noise into signal.

Scenario: requesting a product-launch email
[Role]Tell it who it's acting as.
[Context]Give the background a stranger would need.
[Task]The actual ask — always on the air.locked · core signal
[Format]Length, structure, and tone of the output.
[Example]Show, don't just tell, when format is unusual.
[Constraints]What to avoid, as clearly as what to include.
Readable signal
05 — Practical tips

Field-tested tips

Small adjustments that consistently improve results. Expand any tip for the reasoning behind it.

Tip 01Assign a role+
Give the model a persona or area of expertise before the task. A model told it's "a senior copy editor" tends to apply more domain-specific judgment than one given no role at all.
Tip 02Avoid negation+
Models follow positive instructions more reliably than negative ones. "Write in plain English" lands better than "don't use jargon" — the model has to picture the thing you don't want before it can avoid it.
Tip 03Mind capitalization+
Casing can carry meaning. ALL CAPS can read as emphasis or urgency to a model, much like it would to a person — reserve it for instructions that genuinely need extra weight.
Tip 04Mind the cut-off date+
Every model has a training cutoff. For anything time-sensitive, state today's date in the prompt or ask the model to flag where it might be relying on outdated information.
Tip 05Ask for an output preview first+
On longer or unfamiliar tasks, ask the model to sketch the structure or outline before producing the full result. It's cheaper to redirect a one-line outline than to rewrite a finished draft.
Tip 06Define the audience+
Few prompts state it, but who's reading matters as much as what's being said. "Explain this to a board member" and "explain this to a new intern" shouldn't produce the same paragraph.
Tip 07Vary the order of the building blocks+
Instruction, context, input data, and output format don't have to arrive in a fixed sequence. If a prompt isn't landing, try reordering the same pieces before rewriting them from scratch.
Tip 08Save proven, complex prompts for reuse+
A prompt that took five attempts to get right is worth keeping. Treat it as a template and swap in new details rather than starting from a blank page every time.
Tip 09Experiment with emotional framing+
Phrasing a request with stakes attached — "this matters to my team," "take your time and be thorough" — can shift the tone and effort of the response. Worth testing rather than assuming it does nothing.
Tip 10Format longer prompts as Markdown+
Headings, bullet points, and bold text help a model parse a long prompt the same way they help a person skim one. Structure is information, even inside the instruction itself.
06 — Hazards

When the signal gets hijacked

Because language models respond to whatever text they're given, that openness can be turned against them. Prompt injection is the umbrella term for any attempt to steer a system outside its intended behavior using crafted input.

HazardPrompt leaking+
Coaxing a system into revealing instructions or configuration meant to stay hidden. A support bot that auto-replies to certain keywords can sometimes be tricked into exposing the exact rules it was given. Even when the leak looks harmless, it can expose confidential business logic, internal workflows, proprietary strategy, or trade secrets — and the discovery itself can erode trust in whatever it's running.
HazardJailbreaking+
Manipulating a system into setting aside its own safety rules entirely. A successful jailbreak can push a system to produce discriminatory content, misinformation, or other material it would normally refuse. Beyond the immediate harm, incidents like this are corrosive to public trust in whatever brand deployed the system.
DefenseRed teams+
The countermeasure most providers build in: a dedicated team paid to break the system on purpose. Red teams test systems the way a penetration tester probes a network — systematically searching for and exploiting weaknesses before an outside attacker can. Catching a failure mode early means it can be patched before it ever reaches a real user.

Why it matters

  • Reputational damage
  • Exposure of confidential information
  • Spread of misleading content
  • Unplanned operational costs
07 — Cheat sheet

Pre-transmission checklist

Run any draft prompt through this list before sending it. Most well-formed prompts touch at least five of these.

0 / 8 confirmed
08 — Glossary

Field terms

Prompt+
The natural-language instruction used to direct an AI system.
Prompt design+
The user-facing craft of wording instructions effectively.
Prompt engineering+
The technical work of connecting data, APIs, and parameters behind a prompt.
Zero / one / few-shot+
Prompting with zero, one, or several worked examples included.
Chain-of-thought (CoT)+
Prompting that asks for visible, step-by-step reasoning.
Self-consistency+
Running a prompt multiple times and taking the most frequent answer.
Tree-of-thought (ToT)+
Prompting that develops multiple reasoning paths in parallel before merging them.
Prompt chaining+
Breaking a task into a sequence of linked prompts.
Prompt injection+
Any attempt to manipulate a model's behavior through crafted input.
Prompt leaking+
A form of injection that exposes hidden system instructions.
Jailbreaking+
A form of injection that bypasses a model's safety constraints.
Red team+
A security team that proactively tests a system for weaknesses.