diff --git a/AGENTS.md b/AGENTS.md
index 9fc052f..936f36b 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -33,6 +33,13 @@ the parallel pfv-bms session/repo. This repo ships ONLY the reader-host
 side + the webhook contract documented in README.md. Do not edit
 KNEL/pfv-bms from here.
 
+## Scope boundary: server-room door ONLY (founder ruling 2026-09-02)
+
+Badge access work is fully contained to the server-room door. Do NOT
+integrate, configure, or touch any other smart locks in the house —
+not even "obvious" ones. Any such ask is a new ticket for the founder
+to approve.
+
 ## Engineering
 
 - TDD red/green for all code (`scripts/test.sh` is the local gate).