The Scope Limitation Paragraph: Attestation Grammar for Cryptographic Inventory

Cryptographic inventory has produced a specification for what an inventory contains and no grammar for what an inventory says about its own reach. The assurance professions settled that grammar more than a century ago and express it in a structural element of every attestation report: a statement of scope, and, where the examination could not perform an intended procedure, a scope limitation that modifies the conclusion. This note maps that element onto cryptographic inventory. It distinguishes claims about an inventory record from the claim that the record describes the estate, holds that the second is unfalsifiable unless qualified, and proposes a five-element form for a coverage declaration: subject matter and boundary; criteria; methods applied by boundary segment; scope limitation, with each unreached class marked as closable by further effort or closed by construction; and a conclusion modified by that limitation. It identifies the schema element the form requires and that no current cryptographic bill of materials specification provides — a first-class object representing an examined-and-not-reached class, carrying a reason code and a permanence flag — observing that in its absence the absence of a record and the record of an absence are indistinguishable. Consequences are drawn for procurement, for insurance underwriting, and for the scope of the practitioner's professional undertaking. The note continues the doctrine stated in Jenkins Bey (2026), Step Zero: The Cryptographic Inventory Imperative — Doctrine Summary (10.5281/zenodo.22086669), and the dependency classes set out in Operational Dependency: What Cryptographic Inventories Omit (10.5281/zenodo.22086989). It states explicitly what it does not establish and carries a declaration of interest. The author also publishes under the name S. E. Jenkins; both names resolve to the ORCID iD attached to this record.