clarifications scope, composite products, deployment context, vuln handling See merge request cyber/stan4cr2/en-304-623!13