Origin: surfaced by the os-dev run for #11457 (PR #12214) while repairing the adjudicated rotted liveness anchors. Filed by the PM on the dev's behalf (recording only — unassigned, awaiting triage).
Dev's report, verbatim: "action.json still cites packages/runtime/src/http-dispatcher.ts for type, body and method… the actions domain was extracted into domains/actions.ts + action-execution.ts… This is also the honest limit of the key-mention signal."
Why the new check cannot catch this: type, body, and method are common English words. The word-bounded key-mention check added in PR #12214 confirms the cited file mentions the key, which these files do incidentally — it cannot distinguish a live citation from an English-language coincidence. These three entries therefore pass check:liveness without their anchors being proven live. That is the designed, honest limit of the signal, which makes this class invisible to tooling and worth a manual pass.
What's needed: call-graph re-verification of the type/body/method entries in packages/spec/scripts/liveness/action.json — confirm whether packages/runtime/src/http-dispatcher.ts still consumes them, or whether the anchors should be repointed to domains/actions.ts / action-execution.ts (as PR #12214 did for the adjudicated target/requiredPermissions entries).
Scope note: deliberately NOT folded into PR #12214 — that card's accept set was the adjudicated repairs; these three entries were not adjudicated and need their own verification before any edit. H17 reminder for the eventual implementer: packages/runtime/src/http-dispatcher.ts is a Restart-touch file of on-hold cards #7898/#8347 — verification reads are fine, but any edit there must stop and report per the hold's rider clause.
Dedup (searched 2026-08-25): #9316 and #9813 (both closed) touch action.json for other reasons; neither covers these entries' citation staleness. No open card does.
Origin: surfaced by the os-dev run for #11457 (PR #12214) while repairing the adjudicated rotted liveness anchors. Filed by the PM on the dev's behalf (recording only — unassigned, awaiting triage).
Dev's report, verbatim: "action.json still cites packages/runtime/src/http-dispatcher.ts for
type,bodyandmethod… the actions domain was extracted into domains/actions.ts + action-execution.ts… This is also the honest limit of the key-mention signal."Why the new check cannot catch this:
type,body, andmethodare common English words. The word-bounded key-mention check added in PR #12214 confirms the cited file mentions the key, which these files do incidentally — it cannot distinguish a live citation from an English-language coincidence. These three entries therefore passcheck:livenesswithout their anchors being proven live. That is the designed, honest limit of the signal, which makes this class invisible to tooling and worth a manual pass.What's needed: call-graph re-verification of the
type/body/methodentries inpackages/spec/scripts/liveness/action.json— confirm whetherpackages/runtime/src/http-dispatcher.tsstill consumes them, or whether the anchors should be repointed todomains/actions.ts/action-execution.ts(as PR #12214 did for the adjudicatedtarget/requiredPermissionsentries).Scope note: deliberately NOT folded into PR #12214 — that card's accept set was the adjudicated repairs; these three entries were not adjudicated and need their own verification before any edit. H17 reminder for the eventual implementer:
packages/runtime/src/http-dispatcher.tsis a Restart-touch file of on-hold cards #7898/#8347 — verification reads are fine, but any edit there must stop and report per the hold's rider clause.Dedup (searched 2026-08-25): #9316 and #9813 (both closed) touch action.json for other reasons; neither covers these entries' citation staleness. No open card does.