For any operation involving money, identity, or security, it is not sufficient to rely solely on prompts to constrain the model — enforcement must be mandatory at the code level through hooks, because hooks are guarantees while prompts are merely suggestions.