Methodology for recovering hidden system prompts from LLM-based products. Covers direct extraction, differential probing, and reconstruction from partial leaks. Relevant for competitive intelligence assessments and prompt confidentiality evaluations.