diff --git a/docs/agent-hierarchy.md b/docs/agent-hierarchy.md
index 038a52c3..3243afa6 100644
--- a/docs/agent-hierarchy.md
+++ b/docs/agent-hierarchy.md
@@ -99,6 +99,7 @@ Once enforcement lands the rules collapse into:
 | `kill` / `start` / `restart` / `update` (any descendant)                | any ancestor                                                                            |
 | `request_init_config` (spawn a new child)                               | any agent, child added under self                                                       |
 | `request_apply_commit` (any descendant's config)                        | any ancestor                                                                            |
+| `request_merge_config_pr` (any descendant's forge config PR)            | any ancestor                                                                            |
 | `get_logs` (any descendant)                                             | any ancestor                                                                            |
 | moderate questions / reminders (cancel any open thread of a descendant) | any ancestor                                                                            |
 | `send` / `recv` routing                                                 | parent ↔ same-parent siblings ↔ self ↔ descendants; explicit allow-list for anyone else |
diff --git a/docs/conventions.md b/docs/conventions.md
index 2c43c4af..9cf7e7be 100644
--- a/docs/conventions.md
+++ b/docs/conventions.md
@@ -325,7 +325,7 @@ binary flavor.
 | `inbox` | `get_loose_ends`, `cancel_loose_end`, `remind`, `request_next_turn` |
 | `execution` | vestigial — `mcp__bash__run` / `mcp__bash__status` are always available unconditionally via `extraMcpServers`; this group's entries expand to non-existent `mcp__hyperhive__run` / `mcp__hyperhive__status` and have no effect. See `docs/tools/bash.md`. |
 | `lifecycle` | `kill`, `start`, `restart`, `update` *(privileged)* |
-| `approvals` | `request_init_config`, `request_apply_commit`, `request_update_meta_inputs` *(privileged)* |
+| `approvals` | `request_init_config`, `request_apply_commit`, `request_merge_config_pr`, `request_update_meta_inputs` *(privileged)* |
 | `scheduling` | `request_schedule_prompt`, `fire_schedule_now`, `cancel_schedule`, `edit_schedule`, `list_schedules` *(privileged)* |
 | `diagnostics` | `get_logs` *(privileged)* |