# Negative-instruction backfire in style prompts > Source-anchored research for Negative-instruction backfire in style prompts. Run status: COMPLETED. Parent: [Prompt-side control of LLM lexical tics](https://llms-explorer.com/tree/ai-isms-prompt-side-control/) · 5 facets · 7 facts · page: https://llms-explorer.com/tree/negative-instruction-backfire-in-style-prompts/ ## Structure and components - In a 40,000-sample study of forbidden-word constraints, 87.5% of violations were 'priming failures' (naming the word activated it) and 12.5% were 'override failures' from late-layer feed-forward networks; violation probability follows a logistic curve in the model's intrinsic probability of the forbidden token. (low confidence) — [source](https://arxiv.org/abs/2601.08070) ## How it works - Mentioning a topic in the prompt makes the model more likely to mention it even when told to avoid it (the Pink Elephant problem); prompting alone was outperformed by a Llama-2-13B model fine-tuned with Direct Principle Feedback, which matched GPT-4 on the authors' test set. (medium confidence) — [source](https://arxiv.org/abs/2402.07896) ## Problems, failure modes and limitations - Listing banned words in a style prompt is an antipattern: the list itself places the tokens in context and primes them; pair any unavoidable prohibition with a named replacement. (medium confidence) — [source](https://arxiv.org/abs/2601.08070) ## Comparisons and alternatives - Circuit analysis suggests sparse middle-layer attention heads amplify forbidden tokens while early layers suppress them, so ironic rebound reflects competing internal representations rather than simple suppression. (low confidence) — [source](https://arxiv.org/abs/2511.12381) - Anthropic's prompting docs advise telling Claude what to do instead of what not to do (e.g. replace 'Do not use markdown' with a positive description of the wanted prose format). (medium confidence) (verified as of 2026-09-23) — [source](https://platform.claude.com/docs/en/build-with-claude/prompt-engineering/claude-prompting-best-practices) - The backfire is scoped, not universal: a small code-review test found prohibitions matched the positive reframe on discrete actions and underperformed only on judgment calls (2/3 false positives with prohibition vs 0/3 with reframe); earlier inverse-scaling evidence came from classification tasks on older models. (low confidence) — [source](https://mavka.ai/blog/negative-vs-positive-instructions) ## Facts and statements - Negation instructions such as 'do not mention X' can paradoxically increase the accessibility of X in LLMs (ironic rebound); rebound appears immediately after negation and worsens with longer or semantic distractor text, while repetition supports suppression. (medium confidence) — [source](https://arxiv.org/abs/2511.12381)