diff --git a/checks/health/reads-outside b/checks/health/reads-outside
index 1aaa7f89..419af578 100644
--- a/checks/health/reads-outside
+++ b/checks/health/reads-outside
@@ -1,5 +1,10 @@
 # What these tests read outside their package, as paths from the repository's root (a glob, or a directory read whole;
 # ? before a path whose absence is read). mesh-build-go hashes them into the package's digest, so its verdict is kept
 # until one of them changes (issue 1936). An empty list, or a line matching nothing, keeps nothing.
-# every manifest.
+# every manifest through mesh-sdk's ReadTreeManifest: the root's predefined keys and each templated module's
+# templates (files/ by default, or the directory its manifest names); and the root's kept count of undeclared ports.
 modules/*/module.json
+predefined.json
+modules/*/files
+modules/*/templates
+health-undeclared