Can LLMs stop when producing any output violates their own rules?