diff --git a/patterns/archetypes/content-moderation.json b/patterns/archetypes/content-moderation.json
index e62a679..d0e1df1 100644
--- a/patterns/archetypes/content-moderation.json
+++ b/patterns/archetypes/content-moderation.json
@@ -45,7 +45,8 @@
   "tips": [
     "Never auto-close or lock \u2014 label and comment only",
     "Include explicit rules for what IS legitimate to reduce false positives",
-    "Use DO NOT constraints for actions the agent should never take"
+    "Use DO NOT constraints for actions the agent should never take",
+    "Enable tools.github.lockdown to restrict surfaced content from public repos to authors with push access"
   ],
   "anti_patterns": []
 }
diff --git a/patterns/archetypes/pr-review.json b/patterns/archetypes/pr-review.json
index 1ac92d1..dc5b02e 100644
--- a/patterns/archetypes/pr-review.json
+++ b/patterns/archetypes/pr-review.json
@@ -55,7 +55,8 @@
   "tips": [
     "Focus on specific review criteria (security, performance, style)",
     "Use pull_request triggers focused on ready-to-review activity",
-    "Include DO NOT constraints to avoid false positive comments"
+    "Include DO NOT constraints to avoid false positive comments",
+    "Set tools.github.min-integrity (e.g. approved) so the agent only acts on content from trusted authors"
   ],
   "anti_patterns": [
     "supply-chain-review",