The Stop hook keeps the harness honest, because everything before it only stops the agent doing the wrong thing while it's still running. Someone writes a rule down and later edits it out. The Stop hook won't catch that. Rules that people amend by hand need to live somewhere the generator doesn't touch. I've not found another way to close that gap.