diff --git a/skills/objectui/guides/auth-permissions.md b/skills/objectui/guides/auth-permissions.md
index c38c16c729..0ca663ed8f 100644
--- a/skills/objectui/guides/auth-permissions.md
+++ b/skills/objectui/guides/auth-permissions.md
@@ -309,7 +309,7 @@ Then in schema — note the `data.` root:
 |---|---|---|
 | `data` | the `dataSource` passed to `SchemaRendererProvider` | `${data.canDeleteContacts}` |
 | `user` / `current_user` | the ambient host scope (app-shell's `ExpressionProvider`) | `${user.id}` |
-| `app`, `features` | the ambient host scope | `${features.multiOrgEnabled}` |
+| `features` | the ambient host scope | `${features.multiOrgEnabled}` |
 | `page` | `PageSchema.variables`, inside a Page | `${page.selectedId}` |
 
 The ambient roots exist only while a host scope is mounted — `ExpressionProvider`
diff --git a/skills/objectui/rules/protocol.md b/skills/objectui/rules/protocol.md
index b2680d9f5a..9c39edab32 100644
--- a/skills/objectui/rules/protocol.md
+++ b/skills/objectui/rules/protocol.md
@@ -280,7 +280,7 @@ form-supported type (`select`, `lookup`, `date`, `file`, `image`, `richtext`,
   options, lookup config, `multiple`/`accept`/`maxSize` from the object field;
   inline properties override.
 - `required` blocks submit; `visible` is a CEL predicate
-  (`features` / `current_user` / `app` / `data`) that hides the param.
+  (`data` / `features` / `current_user`) that hides the param.
 
 **❌ DO NOT** invent param-only type spellings — use spec `FieldType` values.
 **❌ DO NOT** add bespoke per-type render branches to `ActionParamDialog`;