Follow up from Prohibit non admin writes to system spaces: resolve naming and predicate check

Summary

• fix: follow up resolve naming and predicate check

---

• Follow-up for !1213 (merged)
• Cherry-pick to: none
• Docs follow-up: docs#338 (closed)