Scope identifies the authorised systems and objectives. Rules of engagement explain how, when and under which conditions the team may act.
Verifiable boundaries
A useful rule avoids ambiguity. It should identify assets, time windows, restricted techniques, emergency contacts and stop conditions.
Decisions during the operation
When a path crosses a third party, an uninventoried environment or an unforeseen condition, the operator must pause and escalate. The absence of a prohibition is not authorisation.
Change record
Every scope change needs a date, an owner and a reason. The team must always work from the current version and retain previous ones.