diff --git a/.agents/hooks.json b/.agents/hooks.json
index b9c7da4..3da1370 100644
--- a/.agents/hooks.json
+++ b/.agents/hooks.json
@@ -9,7 +9,7 @@
     ],
     "Stop": [
       {
-        "command": "discipline hook run --agent agy --observe",
+        "command": "discipline hook run --agent agy",
         "timeout": 120,
         "type": "command"
       }
diff --git a/.claude/hooks/discipline-bootstrap.sh b/.claude/hooks/discipline-bootstrap.sh
index af0e87a..7dca7f6 100755
--- a/.claude/hooks/discipline-bootstrap.sh
+++ b/.claude/hooks/discipline-bootstrap.sh
@@ -7,7 +7,7 @@ set -u
 [ "${CLAUDE_CODE_REMOTE:-}" = "true" ] || exit 0
 command -v discipline >/dev/null 2>&1 && exit 0
 
-version="v0.14.2"
+version="v0.14.4"
 say() { echo "discipline bootstrap: $*" >&2; }
 case "$(uname -m)" in
   x86_64|amd64) arch="x86_64" ;;
diff --git a/.github/workflows/copilot-setup-steps.yml b/.github/workflows/copilot-setup-steps.yml
index f61bedc..911d0d7 100644
--- a/.github/workflows/copilot-setup-steps.yml
+++ b/.github/workflows/copilot-setup-steps.yml
@@ -24,6 +24,6 @@ jobs:
       contents: read
     steps:
       - name: Install discipline for Copilot's hooks
-        uses: orieg/discipline@f251807952d0fb75e6b3a0a269edc96bf9a0d7b4 # v0.14.2
+        uses: orieg/discipline@410daf24d6bedc10b5ef8137de6ccb2dace767b4 # v0.14.4
         with:
           install_only: 'true'
diff --git a/.github/workflows/discipline.yml b/.github/workflows/discipline.yml
index dbc5677..98a1f77 100644
--- a/.github/workflows/discipline.yml
+++ b/.github/workflows/discipline.yml
@@ -18,9 +18,9 @@ jobs:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           fetch-depth: 0 # merge base must be reachable
-      - uses: orieg/discipline@f251807952d0fb75e6b3a0a269edc96bf9a0d7b4 # v0.14.2
+      - uses: orieg/discipline@410daf24d6bedc10b5ef8137de6ccb2dace767b4 # v0.14.4
         with:
-          version: v0.14.2
+          version: v0.14.4
           fail_on_warnings: true
           # Judge a change by the base branch's discipline.toml, so a policy edit
           # takes effect only once merged (config-integrity still reports it).