diff --git a/codex/AGENTS.md b/codex/AGENTS.md
index dea6df8..e11b3cc 100644
--- a/codex/AGENTS.md
+++ b/codex/AGENTS.md
@@ -21,6 +21,11 @@
   user explicitly requests it.
 - Keep redundant connector plugins disabled or uninstalled so they do not
   distract tool selection.
+- Before requesting consent or changing a live external tenant, explain the
+  effective authorization grant and why it is needed. Confirm that approval
+  applies to that exact route.
+- Decline broad management consent when a narrower route exists. Verify the
+  effective grant rather than trusting requested scope labels alone.
 
 ## Runtime Routing
 
diff --git a/manifests/policy-contracts.json b/manifests/policy-contracts.json
index df8bc35..2f9b7e5 100644
--- a/manifests/policy-contracts.json
+++ b/manifests/policy-contracts.json
@@ -97,7 +97,10 @@
       "path": "codex/AGENTS.md",
       "required": [
         "Prefer a locally authenticated CLI over a connector when both cover the task.",
-        "Keep redundant connector plugins disabled or uninstalled so they do not distract tool selection."
+        "Keep redundant connector plugins disabled or uninstalled so they do not distract tool selection.",
+        "Before requesting consent or changing a live external tenant, explain the effective authorization grant and why it is needed.",
+        "Decline broad management consent when a narrower route exists.",
+        "Verify the effective grant rather than trusting requested scope labels alone."
       ]
     },
     {