@@ -20,6 +20,7 @@ import { ObjectKernel, type PluginContext } from '@objectstack/core';
 import { defineStack } from '@objectstack/spec';
 import { ObjectQL } from './engine.js';
 import { ObjectQLPlugin } from './plugin.js';
+import { FIND_BOUND_ACTION_COLLISIONS, SchemaRegistry } from './registry.js';
 
 /** The package that OWNS the target object, with an action of its own. */
 const OWNER = {
@@ -59,14 +60,14 @@ async function engineWith(packages: any[]) {
 const servedRename = (engine: ObjectQL): any[] =>
     ((engine.registry.getObject('bc_org') as any)?.actions ?? []).filter((a: any) => a?.name === 'rename');
 
-describe('SchemaRegistry.findBoundActionCollisions', () => {
+describe('the registry\'s bound-action collision audit', () => {
     for (const [order, packages] of [
         ['owner first', [OWNER, TWIN]],
         ['twin first', [TWIN, OWNER]],
     ] as const) {
         it(`${order}: a different declaration under the object's own action name is one pair, naming both packages`, async () => {
             const engine = await engineWith([...packages]);
-            expect(engine.registry.findBoundActionCollisions()).toEqual([
+            expect(engine.registry[FIND_BOUND_ACTION_COLLISIONS]()).toEqual([
                 { objectName: 'bc_org', action: 'rename', servedPackageId: 'com.test.owner', shadowedPackageId: 'com.test.twin' },
             ]);
             // Reported, not acted on: the object still serves its own declaration.
@@ -76,7 +77,7 @@ describe('SchemaRegistry.findBoundActionCollisions', () => {
 
     it('one declaration carried by two packages is not a collision', async () => {
         const engine = await engineWith([OWNER, CARRIER]);
-        expect(engine.registry.findBoundActionCollisions()).toEqual([]);
+        expect(engine.registry[FIND_BOUND_ACTION_COLLISIONS]()).toEqual([]);
     });
 
     it('a same-stack bound action — merged onto its object and kept top-level — is not a collision', async () => {
@@ -88,24 +89,34 @@ describe('SchemaRegistry.findBoundActionCollisions', () => {
         // The JSON round trip is the compiled artifact's shape: two copies, not one reference.
         const engine = await engineWith([JSON.parse(JSON.stringify({ ...stack, ...stack.manifest }))]);
         expect((engine.registry.getObject('bc_same') as any)?.actions?.map((a: any) => a.name)).toEqual(['same_action']);
-        expect(engine.registry.findBoundActionCollisions()).toEqual([]);
+        expect(engine.registry[FIND_BOUND_ACTION_COLLISIONS]()).toEqual([]);
     });
 
     it('two packages binding different declarations of one name to a third package\'s object: the first attached is served, the second reported', async () => {
         const owner = { ...OWNER, objects: [{ ...OWNER.objects[0], actions: [] }] };
         const second = { ...TWIN, id: 'com.test.second', name: 'second', actions: [{ ...TWIN.actions[0], label: 'Rename (second)', target: 'https://example.com/second' }] };
         const engine = await engineWith([owner, TWIN, second]);
         expect(servedRename(engine).map((a) => a._packageId)).toEqual(['com.test.twin']);
-        expect(engine.registry.findBoundActionCollisions()).toEqual([
+        expect(engine.registry[FIND_BOUND_ACTION_COLLISIONS]()).toEqual([
             { objectName: 'bc_org', action: 'rename', servedPackageId: 'com.test.twin', shadowedPackageId: 'com.test.second' },
         ]);
     });
 
+    it('is no nameable member of the published face: keyed on a symbol neither package entry exports', async () => {
+        const entry = await import('./index.js');
+        const core = await import('./core.js');
+        expect('FIND_BOUND_ACTION_COLLISIONS' in entry).toBe(false);
+        expect('FIND_BOUND_ACTION_COLLISIONS' in core).toBe(false);
+        expect(Object.values(entry)).not.toContain(FIND_BOUND_ACTION_COLLISIONS);
+        expect(Object.getOwnPropertyNames(SchemaRegistry.prototype)).not.toContain('findBoundActionCollisions');
+        expect(Object.getOwnPropertySymbols(SchemaRegistry.prototype)).toContain(FIND_BOUND_ACTION_COLLISIONS);
+    });
+
     it('narrowed to a set of packages, it answers only the pairs naming one of them', async () => {
         const engine = await engineWith([OWNER, TWIN, BYSTANDER]);
-        expect(engine.registry.findBoundActionCollisions(new Set(['com.test.bystander']))).toEqual([]);
-        expect(engine.registry.findBoundActionCollisions(new Set(['com.test.owner']))).toHaveLength(1);
-        expect(engine.registry.findBoundActionCollisions(new Set(['com.test.twin']))).toHaveLength(1);
+        expect(engine.registry[FIND_BOUND_ACTION_COLLISIONS](new Set(['com.test.bystander']))).toEqual([]);
+        expect(engine.registry[FIND_BOUND_ACTION_COLLISIONS](new Set(['com.test.owner']))).toHaveLength(1);
+        expect(engine.registry[FIND_BOUND_ACTION_COLLISIONS](new Set(['com.test.twin']))).toHaveLength(1);
     });
 });
 
 
@@ -46,7 +46,7 @@ import {
 import { SecurityCatalogNameConflictError, findEnvironmentHeldSecurityCatalogNames } from './registry.js';
 // [ADR-0029 D3] The registry's own refusal of a second owner — read, never
 // re-derived, when a residual object's name is already owned.
-import { ObjectOwnershipConflictError, collectManifestBoundActions, collectManifestObjectNames, describeBoundActionCollision, describeUnboundActionTargets, type BoundActionCollision } from './registry.js';
+import { ObjectOwnershipConflictError, collectManifestBoundActions, collectManifestObjectNames, describeBoundActionCollision, describeUnboundActionTargets, FIND_BOUND_ACTION_COLLISIONS, type BoundActionCollision } from './registry.js';
 
 export type { Plugin, PluginContext };
 
@@ -789,7 +789,7 @@ export class ObjectQLPlugin implements Plugin {
         if (this.boundActionTargetsSealed) {
           const arrived = new Set(scope.packageIds);
           if (residual?.ownerId !== undefined) arrived.add(residual.ownerId);
-          this.reportBoundActionCollisions(ctx, ql.registry.findBoundActionCollisions(arrived));
+          this.reportBoundActionCollisions(ctx, ql.registry[FIND_BOUND_ACTION_COLLISIONS](arrived));
         }
         // Manifests registered AFTER start() (marketplace install / ledger
         // rehydrate arrive on `kernel:ready` or an HTTP request) land in the
@@ -946,7 +946,7 @@ export class ObjectQLPlugin implements Plugin {
         // the action and both packages — judged here for the same reason, and
         // reported, never refused: the object keeps serving its own (rung 1)
         // and the boot goes on. Each late artifact is judged as it arrives.
-        this.reportBoundActionCollisions(ctx, this.ql?.registry.findBoundActionCollisions() ?? []);
+        this.reportBoundActionCollisions(ctx, this.ql?.registry[FIND_BOUND_ACTION_COLLISIONS]() ?? []);
         // #7737 — FIRST, before anything that might read data: bind every
         // declared federated object to its remote table now that every
         // plugin's `start()` (including the declared-datasource auto-connect
@@ -2887,7 +2887,7 @@ export class ObjectQLPlugin implements Plugin {
 
   /**
    * [#24472] One author-visible warning per same-name pair
-   * ({@link SchemaRegistry.findBoundActionCollisions}): the object, the action
+   * (the registry's audit under {@link FIND_BOUND_ACTION_COLLISIONS}): the object, the action
    * and both packages. `warn`, by the degradation-level question — the object
    * visibly serves one declaration and nothing claimed persisted is lost.
    */
 
@@ -153,10 +153,19 @@ export function describeUnboundActionTargets(
   return err;
 }
 
+/**
+ * [#24472] The key {@link SchemaRegistry}'s bound-action collision audit is
+ * carried under. A symbol, and ⛔ deliberately NOT re-exported from the package
+ * entry (`index.ts`, `core.ts`), so the audit is no NAMEABLE member of the
+ * registry's published face: only the ObjectQL plugin's boot and late-artifact
+ * reports reach it, importing the key from this module.
+ */
+export const FIND_BOUND_ACTION_COLLISIONS: unique symbol = Symbol('objectstack.objectql.findBoundActionCollisions');
+
 /**
  * [#24472] A bound top-level action that its target object does NOT list,
  * because the object already lists a DIFFERENT declaration under the same
- * name — see {@link SchemaRegistry.findBoundActionCollisions}.
+ * name — see {@link FIND_BOUND_ACTION_COLLISIONS}.
  */
 export interface BoundActionCollision {
   /** The object both declarations are for. */
@@ -3572,7 +3581,7 @@ export class SchemaRegistry {
    * written back from a served read. An action the object already declares
    * keeps the object's declaration, the precedence the router applies (rung 1
    * before rung 2); when the two declarations differ, the ObjectQL plugin
-   * reports the pair at boot ({@link findBoundActionCollisions}). A target no
+   * reports the pair at boot ({@link FIND_BOUND_ACTION_COLLISIONS}). A target no
    * package registers is refused at boot, not here — see
    * {@link findUnboundActionTargets}.
    *
@@ -3660,9 +3669,10 @@ export class SchemaRegistry {
    * to the pairs naming one of those packages on either side — a late
    * artifact's, so a pair the boot already reported is not reported again.
    *
-   * @internal
+   * Keyed on {@link FIND_BOUND_ACTION_COLLISIONS}, a symbol the package entry
+   * does not export, so the audit adds no nameable member to the published face.
    */
-  findBoundActionCollisions(packageIds?: ReadonlySet<string>): BoundActionCollision[] {
+  [FIND_BOUND_ACTION_COLLISIONS](packageIds?: ReadonlySet<string>): BoundActionCollision[] {
     const out: BoundActionCollision[] = [];
     for (const action of this.boundCodeActions()) {
       const objectName = standaloneActionOwnerKey(action);