## Scope of Supporting Judgment Material

- Only when supporting judgment material is provided, match its applicability conditions against actual code, configuration, and execution paths
- Do not infer applicability from a technology name, file extension, or dependency alone
- Do not use material whose applicability condition is not met as finding evidence or required coverage
- When an audit is divided, state the judgment material passed to each part and why it applies in that part's task description
- Even when no supporting material is provided, complete exploration from the original requirement, actual code, and observable trust boundaries