Constant KNOWN_ACTION_NAMES 

pub const KNOWN_ACTION_NAMES: &[&str];

Canonical names of every action in the SysKnife catalogue.

This is the single source of truth for “is this string a valid action name?” — kept in sysknife-types (not sysknife-brain) so the RequestEnvelope deserializer can validate at the IPC boundary, and every other crate that touches an action name (the daemon’s policy::min_role_for_action, the CLI’s approval flow, the proto bridge) sees the same list without depending on the brain.

Cross-module invariant: sysknife_brain::propose_plan::KNOWN_ACTIONS (which pairs each name with an LLM-facing description) MUST list every name that appears here, in either order. The brain has a unit test (every_known_action_name_is_in_types) that pins this — adding an action requires a coordinated update to both lists.