diff --git a/AGENTS.md b/AGENTS.md
index 634d7f2..61b0a4d 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -160,6 +160,21 @@ Full details in `@CODING_GUIDELINES.md`. Key rules:
   list concrete changes as bullet points. Never write single-line
   "feat: add X" messages.
 
+**Before every commit (mandatory — agents must not skip):**
+
+```bash
+# from repo root; needs Docker running
+export POSTGRES_DB=bilhej POSTGRES_USER=bilhej POSTGRES_PASSWORD=test_pw_ci_123
+export JWT_SECRET=aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
+export STRIPE_SECRET_KEY=sk_test_fake STRIPE_WEBHOOK_SECRET=whsec_fake STRIPE_PRICE_ID=price_fake
+./gradlew check
+```
+
+This runs frontend lint, frontend unit tests (242), backend tests (163), coverage
+thresholds, Flyway checks, and **all 90 E2E tests in Docker**. **Do not commit or
+push if this fails.** Optional local guard: `./scripts/install-pre-commit-hook.sh`
+(runs the same `check` on every `git commit`).
+
 ### Frontend (Vue.js 3)
 - `<script setup>` with Composition API only. Never Options API.
 - File naming: PascalCase for pages/components, camelCase (`useXxx`) for composables.
diff --git a/scripts/install-pre-commit-hook.sh b/scripts/install-pre-commit-hook.sh
new file mode 100755
index 0000000..a892ded
--- /dev/null
+++ b/scripts/install-pre-commit-hook.sh
@@ -0,0 +1,15 @@
+#!/usr/bin/env bash
+# Symlinks scripts/pre-commit-check.sh into .git/hooks/pre-commit
+
+set -euo pipefail
+
+ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+HOOK="$ROOT/.git/hooks/pre-commit"
+CHECK="$ROOT/scripts/pre-commit-check.sh"
+
+chmod +x "$CHECK"
+ln -sf "../../scripts/pre-commit-check.sh" "$HOOK"
+chmod +x "$HOOK"
+
+echo "Installed pre-commit hook -> scripts/pre-commit-check.sh"
+echo "Every commit will run: ./gradlew check"
diff --git a/scripts/pre-commit-check.sh b/scripts/pre-commit-check.sh
new file mode 100755
index 0000000..dff338e
--- /dev/null
+++ b/scripts/pre-commit-check.sh
@@ -0,0 +1,20 @@
+#!/usr/bin/env bash
+# Runs the same verification as CI before allowing a commit.
+# Install: ./scripts/install-pre-commit-hook.sh
+
+set -euo pipefail
+
+ROOT="$(git rev-parse --show-toplevel)"
+cd "$ROOT"
+
+export POSTGRES_DB="${POSTGRES_DB:-bilhej}"
+export POSTGRES_USER="${POSTGRES_USER:-bilhej}"
+export POSTGRES_PASSWORD="${POSTGRES_PASSWORD:-test_pw_ci_123}"
+export JWT_SECRET="${JWT_SECRET:-aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa}"
+export STRIPE_SECRET_KEY="${STRIPE_SECRET_KEY:-sk_test_fake}"
+export STRIPE_WEBHOOK_SECRET="${STRIPE_WEBHOOK_SECRET:-whsec_fake}"
+export STRIPE_PRICE_ID="${STRIPE_PRICE_ID:-price_fake}"
+
+echo "pre-commit: running ./gradlew check (lint + unit + E2E in Docker)..."
+./gradlew check --no-daemon
+echo "pre-commit: all checks passed."