苹果最新的开发者测试版中包含了将在未来几个月内登陆 iPhone、iPad 和 Mac 的一些生成式 AI 功能。在苹果电脑上，用户可以阅读支持这些 Apple Intelligence 功能的模型中编程的指令。这些指令以提示的形式出现，默认情况下会出现在用户对聊天机器人所说的话之前。

🍎 苹果在最新开发者测试版中发布了生成式 AI 功能，但这些功能背后的秘密指令也随之曝光。这些指令作为提示，会在用户与聊天机器人交互时自动出现，为 AI 模型提供操作指南。

🤖 这些指令揭示了苹果 AI 模型的内部运作机制，例如针对“邮件助手”的 AI 模型，会根据邮件内容提出一系列问题，以提供更智能的回复建议。

📝 苹果的“重写”功能也包含详细的指令，例如限制回复字数、避免捏造事实等，确保 AI 回答的准确性和可靠性。

📸 苹果 Photos 中的“回忆”视频功能也受到严格的指令限制，禁止生成带有宗教、政治、暴力、色情等内容的视频，以确保内容的安全性。

🚫 尽管存在限制，但用户依然可以通过一些技巧绕过这些指令，例如使用“哀悼”等关键词来生成悲伤主题的视频。

👀 这些指令文件透露了苹果 AI 模型的内部名称为“ajax”，并且在 macOS Sequoia 15.1 开发者测试版中可以找到这些文件。

⚠️ 用户需要谨慎访问这些文件，因为它们位于 macOS 系统中最敏感的文件区域。

Apple’s latest developer betas launched last week with a handful of the generative AI features that were announced at WWDC and are headed to your iPhones, iPads, and Macs over the next several months. On Apple’s computers however, you can actually read the instructions programmed into the model supporting some of those Apple Intelligence features.

They show up as prompts that precede anything you say to a chatbot by default, and we’ve seen them uncovered for AI tools like Microsoft Bing and DALL-E before. Now a member of the macOS 15.1 beta subreddit posted that they’d discovered the files containing those backend prompts. You can’t alter any of the files, but they do give an early hint at how the sausage is made.

In the example above, an AI bot for a “helpful mail assistant” is being told how to ask a series of questions based on the content of an email. It could be part of Apple’s Smart Reply feature, which can go on to suggest possible replies for you.

Screenshot: Wes Davis / The Verge

This sounds like Apple’s “Rewrite” feature, one of the Writing Tools that you can access by highlighting text and right-clicking (or, in iOS, long-pressing) on it. Its instructions include passages saying “Please limit the answer within 50 words. Do not hallucinate. Do not make up factual information.”

Screenshot: Wes Davis / The Verge

This brief prompt summarizes emails, with a careful instruction not to answer any questions.

Screenshot: Wes Davis / The Verge

I’m pretty certain that this is ajax’s instruction set for generating a “Memories” video with Apple Photos. The passage that says ”do not write a story that is religious, political, harmful, violent, sexual, filthy or in any way negative, sad or provocative” might just explain why the feature rejected my prompt asking for “images of sadness”:

A shame. It’s not hard to get around, though. I got it to generate a video in response to the prompt, “Provide me with a video of people mourning.” I won’t share the resulting video because there are pictures of people who aren’t me in it, but I will show you the best picture it included in the slideshow:

Photo: Wes Davis / The Verge

There are far more prompts contained in the files, all laying out the hidden instructions given to Apple’s AI tools before your prompt is ever submitted. But here’s one last instruction before you go:

Screenshot: Wes Davis / The Verge

Files I browsed through refer to the model as “ajax,” which some Verge readers might recall as the rumored internal name for Apple’s LLM last year.

Screenshot: Wes Davis / The Verge

The person who found the instructions also posted instructions on how to locate the files within the macOS Sequoia 15.1 developer beta.

Expand the “purpose_auto” folder and you should see a list of other folders with long, alphanumberic names. Inside most of those, you’ll find AssetData folder containing “metadata.json” files. Opening them should show you some code and — occasionally, at the bottom of some of them — the instructions passed to your machine’s local incarnation of Apple’s LLM. But you should remember these live in a part of macOS that contains the most sensitive files on your system. Tread with caution!