diff --git a/.claude/rules/unprompted-work.md b/.claude/rules/unprompted-work.md
index 816a2bd..56996bd 100644
--- a/.claude/rules/unprompted-work.md
+++ b/.claude/rules/unprompted-work.md
@@ -50,6 +50,11 @@ it **first** in the morning note. A decision you cannot write in that shape is o
 8. **Hungarian text is searched with ASCII fragments**, with a positive and a negative control.
 9. **Never leave a half-state.** If time runs out, revert to clean and say what was reverted.
 10. **Teardown, three layers, stated** — machine, host, hub — or "provisioned nothing".
+11. **Every helper prompt carries the brief's fences in full** (operator ruling 2026-10-07). A helper session (a
+    subagent, a fork, a workflow agent) gets the brief's fence list word for word — every protected machine, every
+    „no", every delivery and Docker limit — not a summary and not „the usual fences". Earned on 2026-10-06 night: two
+    helpers whose prompts carried only part of the fences ran `docker volume prune` on the bench and a Docker-using
+    gate on DooPlex.
 
 ## 4. The morning note