What changed
Researchers propose AISPA after auditing 3,249 instructions from 88 commercial products. Although 98.9% had at least one protective instruction, only 24% covered all eight dimensions and roughly 40% contained an instruction classified as working against user interests.
Why it matters
System prompts are part of a product's policy and control surface, yet teams rarely version and audit them with the same discipline as code or permissions.
What to do
Audit production prompts for identity disclosure, truthfulness, privacy, tool safety, user agency, unsafe-request handling, harm prevention and fairness. Version the report beside the prompt.
Caveat
AISPA is an author-proposed framework, not an established standard. Its prompt corpus may be stale, incomplete or unauthenticated, and classifications reflect the authors' normative choices.