diff --git a/AGENTS.md b/AGENTS.md
index 47aaa36..616ddf6 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -53,6 +53,13 @@ There are no exceptions to this rule.**
    usable. The agent MUST NOT set done-ratio to 100%, MUST NOT suggest
    closing, and MUST NOT move to the next ticket until the user explicitly
    accepts the work. "Technically wired but blank dashboard" is NOT done.
+9. **NEVER access a database directly if an API exists.** APIs are the
+   stable contract; databases change schemas without warning. If a tool
+   has an API, use it — exhaust all API endpoints, check the docs, try
+   alternative methods. Only fall back to direct DB access as a last
+   resort AND with explicit user approval for that specific instance.
+   Soon all DB access will route through a proxy under zero trust;
+   building API-first habits now ensures that transition is clean.
 
 ### Access-channel policy: SSH only (NON-NEGOTIABLE)