I’ve tried threats in prompt files, with results that are… OK. Honestly, I can’t tell if they made a difference or not.

The only thing I’ve found that consistently works is writing good old fashioned scripts to look for common errors by LLMs and then have them run those scripts after every action so they can somewhat clean up after themselves.