So the culprit is pi's system prompt. Anthropic scans for a combo of: - read only when the user asks about pi itself + - follow .md cross-references before implementing Test: claude -p --append-system-prompt $'read only when the user asks about pi itself\nfollow .md cross-references before implementing' 'say hi