A trick for high-stakes agent coding.
Agents see code through grep and rg. Those tools are their eyes — every match returns the whole line, every character on it. Nothing on that line gets dropped. So when a calling convention really has to land, I put it inline on the signature, not in the block comment above. Every grep for that function returns the rule with it.
Same for sensitive env vars. The usage rule rides on the access line, however long it gets.
No formal eval, just one observation: after I switched, the violations stopped.
I hope tricks like this become less and less useful over time.