diff --git a/scripts/tier2/setup_tier2_clone.ps1 b/scripts/tier2/setup_tier2_clone.ps1
index f6be3606..f1b242cf 100644
--- a/scripts/tier2/setup_tier2_clone.ps1
+++ b/scripts/tier2/setup_tier2_clone.ps1
@@ -113,8 +113,14 @@ extra_dirs = []
 
         # 4. Install git hooks
         Write-Host "[tier2-bootstrap] installing git hooks"
+        Copy-Item -Force "$MainRepoPath\conductor\tier2\githooks\pre-commit" "$Tier2ClonePath\.git\hooks\pre-commit"
         Copy-Item -Force "$MainRepoPath\conductor\tier2\githooks\pre-push" "$Tier2ClonePath\.git\hooks\pre-push"
         Copy-Item -Force "$MainRepoPath\conductor\tier2\githooks\post-checkout" "$Tier2ClonePath\.git\hooks\post-checkout"
+        # The forbidden-files.txt config is committed to the clone (the
+        # setup script also commits the canonical conductor/tier2/* source
+        # in step 1), so the hook can find it via the project root. If the
+        # file is missing, the hook silently no-ops (see hook source).
+        Write-Host "[tier2-bootstrap] git hooks installed (pre-commit auto-unstages sandbox-only files)"
 
         # 5. Create desktop shortcut
         Write-Host "[tier2-bootstrap] creating desktop shortcut"