diff --git a/AGENTS.md b/AGENTS.md
index ee5bac6..47aaa36 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -46,6 +46,13 @@ There are no exceptions to this rule.**
    it's ambiguous whether the work is truly complete, don't suggest a
    close — leave that decision to the user. This applies to ALL tickets,
    no exceptions.
+8. **User acceptance testing is MANDATORY before declaring work done.**
+   The agent performs implementation and technical validation (services
+   running, configs correct, APIs responding). The user performs UAT —
+   visually confirming dashboards render data, alerts deliver, tools are
+   usable. The agent MUST NOT set done-ratio to 100%, MUST NOT suggest
+   closing, and MUST NOT move to the next ticket until the user explicitly
+   accepts the work. "Technically wired but blank dashboard" is NOT done.
 
 ### Access-channel policy: SSH only (NON-NEGOTIABLE)
 
diff --git a/scripts/check-rules.sh b/scripts/check-rules.sh
index a96fae2..57336c5 100755
--- a/scripts/check-rules.sh
+++ b/scripts/check-rules.sh
@@ -157,7 +157,7 @@ while IFS= read -r -d '' f; do
         POINTER_MISSING=$((POINTER_MISSING + 1))
         $RULE_VERBOSE && printf '    %s\n' "$f"
     fi
-done < <(find . -path ./.git -prune -o -path ./.tmp -prune -o -path ./vendor -prune -o -path ./archive -prune -o -name '*.md' -print0 2>/dev/null)
+done < <(find . -path ./.git -prune -o -path ./.crush -prune -o -path ./.tmp -prune -o -path ./vendor -prune -o -path ./archive -prune -o -name '*.md' -print0 2>/dev/null)
 if [ "$POINTER_MISSING" -eq 0 ]; then
     check "All non-exempt .md cite Discourse ($DISCOURSE_HOST)" "pass"
 else