Telling a model not to do something puts that thing in its context, and attention has no way to subtract it. Describe the output you want, not the one you don’t.