won't the oracle do something vaguely pep723-like once its read a bunch of existing, conformant files into its context? And/or wont the git hooks bitch at it when your scripts folder has files without inline metadata?
AGENTS.md is a poor substitute for agents actually learning, but it somewhat works.
And sure, you can (and should) enforce constraints via githooks whenever you can (determinism is good), but if the agent only finds out at checkin time, it's created a whole bunch of code it needs to redo, and that doesn't run properly if you do the caveman thing and actually run your code before committing. Again, token & context waste.