diff --git a/.claude/rules/unprompted-work.md b/.claude/rules/unprompted-work.md
index 56996bd..b2f1a11 100644
--- a/.claude/rules/unprompted-work.md
+++ b/.claude/rules/unprompted-work.md
@@ -23,7 +23,8 @@ unconditional: true
 customer data; anything that changes a promise the product makes to a customer; anything that
 reverses a documented design decision (`documentation/architecture/` — a design decision is not a
 defect, R-370); anything on DooPlex or ep0; baking or vouching a golden; promoting a
-catalog version; a new external dependency.
+catalog version; a new external dependency; **a hub image build or hub deploy in a session the operator does not
+attend** (operator ruling 2026-10-07, `09` §3 decision 162).
 
 ## 2. When you may decide instead of ask (operator grant, 2026-09-14)