The first rule Jack Harrington mentions is 'no global state,' which means avoiding global variables to prevent issues like cross-request data pollution.