diff --git a/README.md b/README.md
index 1c0e7b3..74ccfa9 100644
--- a/README.md
+++ b/README.md
@@ -254,6 +254,21 @@ Content scales through structured inheritance.
 
 ---
 
+## Infrastructure
+
+### 25. Tool Auto-Provision
+
+When an agent needs a tool that isn't installed, it should install it automatically — not block and ask.
+
+- Container should support on-demand tool installation (apt, npm, go install, curl binary)
+- Dockerfile covers the 80% case; auto-install covers the long tail
+- Log what was installed so it can be baked into the Dockerfile later
+- Never let a missing `jq` or `go` derail a 30-minute sprint
+
+**Origin:** "Wenn irgendwas fehlt wie go — wir brauchen die Möglichkeit ein Tool passthru oder auto-install zu ermöglichen"
+
+---
+
 ## (inbox — unsorted ideas)
 
 _Drop new principles here. They get organized on next pass._