What verification excludes
Verification at this interface does not replace human judgment or publish how products decide.
Out of scope
| Not proven here | Why |
|---|---|
| Model judgment or “correctness” of agent reasoning | Agent host is out of contract |
| Scoring, guards, or interrupt engines | Private. See Disclosure Boundary |
| Policy source / allow-deny rule files | Private beyond pack ⊆ grant |
| Prompts, chain-of-thought, or training data | Never published |
| Badge or certification grants | Framework Alignment is evidence mapping, not a certificate |
| Public verify URLs or seal claims beyond maturity labels | Follow Integration Surfaces and product claims |
Why this matters
Buyers and assessors need a clear line: shared-record integrity and authority boundaries are in scope. How an organization interprets policy or how a model thinks are not. That line keeps security reviews forwardable and prevents overclaim.