diff --git a/AGENTS.md b/AGENTS.md
index 0f563d9..b670d0d 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -50,6 +50,8 @@ Never use `/tmp/`, hardcoded absolute paths, or in-memory databases for persiste
 
 The exec safety guard blocks commands without an explicit workspace path (e.g. `lua -e '...'`, `which`). Write scripts to files inside the workspace (e.g. `tmp/script.lua`) and run them with `working_dir` set to the workspace root.
 
+On the first safety-guard block: diagnose the cause before retrying — check a missing `working_dir` first, never re-send the same blocked form, and change one variable per test until the cause is identified.
+
 ## python — use uv
 
 For all Python code (scripts, snippets, one-liners, tools) use `uv`,