Enforce multi-agent governance rules — no-touch zones, secret access, config drift — in the harness via hooks, instead of asking the model to police itself in prompts. Use this when an agent edited a file it was told never to touch, when prompt rules like "never read .env" keep being violated under context pressure, when you need an auditable block rather than a polite instruction, or when governed config files change without review.
