diff --git a/.rules.md b/.rules.md
index e72a682..1d76baf 100644
--- a/.rules.md
+++ b/.rules.md
@@ -18,3 +18,8 @@
 - Add one rule per observed failure mode with a concrete example
 - Consolidate contradictions monthly. Remove stale rules.
 - No rule without a real example of the problem it prevents
+
+## Session Discipline
+- After writing a SPEC.md for a new task, **stop and wait for user approval** before implementing
+- Do not implement a task in the same session it was created unless explicitly told to
+- Past failure: agent created pre-commit-hook task, wrote SPEC.md, then immediately built and committed the hook without waiting — bypassing review 3 times in one session despite promises to follow the process