truf-server/openspec/changes/prune-low-yield-discovery-keywords/proposal.md

Why

Current discovery rotations spend substantial scanner time on query terms that have accumulated meaningful exposure without linking to a single strict-usable credential for any provider. Removing only this globally zero-yield cohort reduces avoidable discovery and scan work while preserving every query with demonstrated usable yield.

What Changes

• Remove 38 sufficiently exposed, globally zero-yield search terms from the configured GitHub, GitLab, DockerHub, npm, PyPI, package-git, and Postman rotations.
• Remove query-scoped overrides whose corresponding query is retired.
• Preserve source-operational sentinel queries and every term linked to at least one historical strict-usable credential for any provider.
• Preserve historical queue rows, scan results, credential lineage, deduplication state, and all runtime concurrency limits.
• Define a repeatable evidence rule for future pruning instead of using raw findings or provider-specific yield alone.

Capabilities

New Capabilities

• discovery-keyword-pruning: Evidence-based, all-provider retirement of sufficiently tested zero-yield discovery terms.

Modified Capabilities

• openai-discovery-coverage: Retire the literal openai core query after its bounded rollout produced no strict-usable credential for any provider.

Impact

The change affects app/config.yaml, focused query-configuration tests, and authority-managed source rotation after a coordinated restart. It removes 219 configured query occurrences but introduces no schema migration, dependency, queue rewrite, credential recheck, detector change, or scan-concurrency change.