diff --git a/tests/sanitization-patterns.psd1 b/tests/sanitization-patterns.psd1
index 744b33d..b1bc1b0 100644
--- a/tests/sanitization-patterns.psd1
+++ b/tests/sanitization-patterns.psd1
@@ -23,14 +23,20 @@
 #>
 @{
     Denied = @(
-        @{ Name = 'private project name';   Pattern = '\b(EvoCivilCode|EvoPlatform|DocketMail|SmartPlant\w*|ProvenSheet|evoehs|evoproven|evoaicc|evolocate|evoplatform)\b' }
+        # The retired EHS name is split with a one-character class in both rules
+        # below (Smart[P]lant, smart[p]lantehs). The regex is identical - a class of
+        # one matches exactly that character - but the literal no longer appears in
+        # this file, which is public. The private tree still carries that name in
+        # ~20 places, so these rules are still load-bearing: do not delete them,
+        # and do not un-split them.
+        @{ Name = 'private project name';   Pattern = '\b(EvoCivilCode|EvoPlatform|DocketMail|Smart[P]lant\w*|ProvenSheet|evoehs|evoproven|evoaicc|evolocate|evoplatform)\b' }
         # The current spellings, which the line above never saw: a dot or a
         # hyphen breaks the word and an underscore hides the boundary, so
         # evo.ehs, evo-ai and evoehs_app all passed (evo.scripts#138 in the
         # private tree). Internal issue references travel with them.
         @{ Name = 'current product name';    Pattern = '(?i)\bevo[.-](ehs|ai|edge|locate|proven|platform|civilcode|scripts)\b|\bevoehs' }
         @{ Name = 'internal issue reference'; Pattern = 'evo\.scripts#\d+' }
-        @{ Name = 'private product domain'; Pattern = '\b(smartplantehs\.com|provensheet\.com|evoehs\.com|civilcode\.evomedia\.net|dashboard\.evomedia\.net|webmail\.evomedia\.net|mail-admin\.evomedia\.net|docketmail\.evomedia\.net|cardiff\.evomedia\.net|platform\.evomedia\.net|ai\.evomedia\.net|git\.evomedia\.net|analytics\.evomedia\.net)\b' }
+        @{ Name = 'private product domain'; Pattern = '\b(smart[p]lantehs\.com|provensheet\.com|evoehs\.com|civilcode\.evomedia\.net|dashboard\.evomedia\.net|webmail\.evomedia\.net|mail-admin\.evomedia\.net|docketmail\.evomedia\.net|cardiff\.evomedia\.net|platform\.evomedia\.net|ai\.evomedia\.net|git\.evomedia\.net|analytics\.evomedia\.net)\b' }
         @{ Name = 'private-only script';    Pattern = '\b(register_civilcode|register_docketmail|sp_seed_demo_prod|zpublish_stats|zcoverage|zresume|swag_set_owner|provision_demo|apply_platform_config_fixes)\b' }
         @{ Name = 'local drive path';       Pattern = '[A-Za-z]:\\\\?evomedia\.net' }
         @{ Name = 'operator home path';     Pattern = '/home/ubuntu/' }