My bad, the article was fairly general and I thought your question was general as well. Having followed some of the links now, I think your question still stand

My bad, the article was fairly general and I thought your question was general as well. Having followed some of the links now, I think your question still stands. The only way I've found to really force rules is via hooks, and even then I think it's just prompt injection? Maybe some kind of hook/checksum thing to ensure you're running unchanged tests, but as you're pointing out, the agents can get sneaky and do weird stuff if they have write ability.