diff --git a/AGENTS.md b/AGENTS.md
index f781c23df0..023145f535 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -492,12 +492,12 @@ Even inside your own worktree, operate defensively:
    re-verification, done by the platform, race-free. **Arm only what is already green
    and accepted.**
 
-   ⛔ **Two classes of PR never enter this path on green alone:** (a) a diff touching any
-   **governed surface** (**Prime Directive #14**, which names them and holds the current
-   list — **this file and `CLAUDE.md` are on it**, so re-read it rather than recalling
-   it); (b) the **Version Packages** PR, or any PR whose merge performs a release
-   (**Prime Directive #15**). Read the PR's file list (`get_files`) **and its author**
-   before you arm anything.
+   ⛔ **Three classes of PR never enter this path on green alone:** (a) a diff touching any **governed surface**
+   (**Prime Directive #14**, which names them and holds the current list — **this file and `CLAUDE.md` are on it**,
+   so re-read it rather than recalling it); (b) the **Version Packages** PR, or any PR whose merge performs a
+   release (**Prime Directive #15**); (c) a PR whose **changed lines exceed 5,000** (`additions + deletions`,
+   generated files included) — it lands only by a human merge, which is its review record. Read the PR's file
+   list (`get_files`), **its author and its size** before you arm anything.
 
    **Green means the gate-carrying jobs' `conclusion` is `success`** — not "no failure
    yet"; `in_progress` is not a pass. Arming a red PR does not queue it, it hides it: