And agents are very bad at enforcing.
This is just adding wishful thinking to the pile of trash.
Disagree that they are bad at enforcing.
In a single session? Agree. The agent is bad at enforcing rules against itself. In a multi-agent, disconnected session setup? You'll see that this works very well.
Rules and code are both just text, after all.