diff --git a/workflows/workflow-generator/index.ts b/workflows/workflow-generator/index.ts
index 3df2ae6..03f0545 100644
--- a/workflows/workflow-generator/index.ts
+++ b/workflows/workflow-generator/index.ts
@@ -776,6 +776,9 @@ ${fixSection}
    \`\`\`
    Do not remove or overwrite unrelated senses, reflexes, or other workflow entries. Preserve valid YAML.
 
+## CRITICAL constraints
+- **ONLY touch files inside \`${WORKFLOWS_DIR}/${wfName}/\` and \`${NERVE_ROOT}/nerve.yaml\`.** Do NOT read, modify, or create files in any other workflow directory (e.g. \`sense-generator/\`, \`hello-world/\`). The reference code is provided inline above — you do not need to open it from disk.
+
 ## Implementation patterns (when applicable)
 - \`resolveDashScopeProvider\`, \`nerveAgentContext\`, \`readNerveYaml\`, \`cursorAgent\`, \`llmExtract\`, \`spawnSafe\`, \`formatSpawnFailure\` from \`@uncaged/nerve-workflow-utils\` as in sense-generator.
 - No dynamic \`import()\` in the new workflow code.