diff --git a/content/docs/permissions/system-context.mdx b/content/docs/permissions/system-context.mdx
index 1c5ffe7baf..0e7656d391 100644
--- a/content/docs/permissions/system-context.mdx
+++ b/content/docs/permissions/system-context.mdx
@@ -158,7 +158,7 @@ The largest single consumer — **17 of the 106 sites**.
 |:--|:---|:---|:---|:---|
 | 48 | Object API-exposure gate bypassed (`apiEnabled` / `apiMethods`) | runtime | Get: internal self-writes ignore exposure declarations — these govern **external** exposure, not engine self-writes | `action-execution.ts:138` |
 | 49 | Action `requiredPermissions` bypassed | runtime | Get: engine self-invocation runs any action | `action-execution.ts:401` |
-| 50 | `manage_metadata` bypassed on metadata writes | runtime, rest | Get: schema writes without the capability | `domains/meta.ts:471`, `:874`, `rest-server.ts:5084`, `:6510`, `:6758`, `:7189`, `:7382` |
+| 50 | `manage_metadata` bypassed on metadata writes | runtime, rest | Get: schema writes without the capability | `domains/meta.ts:471`, `:874`, `rest-server.ts:5083`, `:6509`, `:6757`, `:7188`, `:7381` |
 | 51 | The shared metadata-write verdict itself returns `allowed` | metadata-core | Get: the one function all of row 50's doors consult answers yes before any capability is examined | `meta-write-capability.ts:134` |
 | 52 | Anonymous-deny seam satisfied on the domain dispatchers and the package/federation routes | runtime, rest | Get: passes with no `userId` | `domains/actions.ts:421`, `domains/ai.ts:60`, `domains/automation.ts:989`, `domains/meta.ts:232`, `domains/security.ts:78`, `domains/packages.ts:422`, `external-datasource-routes.ts:302`, `package-routes.ts:97` |
 | 53 | MCP principal check satisfied | runtime | Get: MCP surface reachable with no user | `domains/mcp.ts:61` |
diff --git a/packages/rest/src/rest-server.ts b/packages/rest/src/rest-server.ts
index c313f44423..3be127592e 100644
--- a/packages/rest/src/rest-server.ts
+++ b/packages/rest/src/rest-server.ts
@@ -3250,9 +3250,8 @@ export class RestServer {
         if (!item || typeof item !== 'object') return item;
         // [#6349] Normalize HERE, not at the call sites. `isTranslatableMetaType`
         // reads `TRANSLATABLE_METADATA_TYPES`, which is DERIVED from
-        // `METADATA_DOCUMENT_TRANSLATORS`' keys — and those are singular-only
-        // (`view`/`action`/`object`/`app`/`dashboard`/`page`), matching
-        // `translateMetadataDocument`'s "Canonical metadata type string". The
+        // `METADATA_DOCUMENT_TRANSLATORS`' keys — and those are singular-only,
+        // matching `translateMetadataDocument`'s "Canonical metadata type string". The
         // `/meta` handlers hand this helper the RAW `:type` path segment, and
         // Prime Directive #3 makes PLURAL the canonical REST spelling, so the
         // documented spelling missed the set and the whole localization was