Scope the operating boundary.

Use this path when the fixed self-serve limits do not fit. Include transaction volume, ingestion, deployment and security constraints, reporting requirements, users, and target timing.

Commercial: Scoped after requirements
Deployment: Agreed with security owners
Jurisdiction: Commissioned against local requirements