Audit Boundary Definitions

Audit boundary definitions establish the specific scope of a security review, detailing which modules, contracts, and interfaces are subject to inspection. Clearly defined boundaries help stakeholders understand what is protected and where potential blind spots exist.

If a protocol relies on external dependencies or oracles, the audit must explicitly state whether these are included or excluded from the analysis. This clarity is essential for risk assessment, as it prevents the misinterpretation of an audit as a comprehensive endorsement of the entire system.

It is a standard practice in professional audit reports.