diff --git a/.github/workflows/vale-ci.yml b/.github/workflows/vale-ci.yml
index f7025784c0..dad39ff0b3 100644
--- a/.github/workflows/vale-ci.yml
+++ b/.github/workflows/vale-ci.yml
@@ -4,6 +4,12 @@ on:
   pull_request:
     paths:
       - "docs/**"
+      # Lint the ruleset changes too. A malformed style file makes Vale exit 2
+      # and skip linting entirely, which would otherwise fail open on every
+      # later PR without anything having flagged it here.
+      - "vale/**"
+      - ".vale-ci.ini"
+      - ".github/workflows/vale-ci.yml"
 
 permissions:
   contents: read
diff --git a/vale/styles/Temporal/Headings.yml b/vale/styles/Temporal/Headings.yml
index 71f740d90d..9ef64b080a 100644
--- a/vale/styles/Temporal/Headings.yml
+++ b/vale/styles/Temporal/Headings.yml
@@ -33,14 +33,19 @@ exceptions:
   # Temporal primitives and proper nouns
   - Activity
   - Activities
+  - Application
+  - Applications
   - Archival
   - Cloud
   - Codec
+  - Command
+  - Commands
   - Converter
   - Cron
   - Data
   - Durable
   - Event
+  - Events
   - Execution
   - Executions
   - Failure
@@ -163,7 +168,15 @@ exceptions:
   - Capacity
   - Connectivity
   - Continue-As-New
+  - Plugin
+  - Plugins
+  # Exact phrases; "Audit Logging" is the canonical term in Temporal/terms.yml,
+  # so keep "Log"/"Logs" out of the single-word list above.
+  - Audit Log
+  - Audit Logs
+  - Audit Logging
   # Cloud provider / networking / industry acronyms
+  - Amazon
   - AWS
   - GCP
   - DNS
@@ -183,10 +196,13 @@ exceptions:
   - TRUs
   - PrivateLink
   - KMS
+  - CA
   # Cloud provider product names (exact phrase, not the individual words)
   - Azure Key Vault
   - Azure Workload Identity
   - GCP Workload Identity
+  - Private Service Connect
+  - Cloud Ops API
   - Terraform
   - Prometheus
   - Grafana