If an AI can bypass a rule, that rule does not exist.
So I stopped writing rules as prompts and started writing them as walls: git hooks, file structure, validators. The agent does not decide to follow them. It structurally cannot route around them.
Prompt-based governance is a suggestion. Structural governance is a constraint.