C.25:15.3 - Security family

Security claims routinely combine:

• trust-zone or attack-class scope,
• measurable characteristics such as patch latency, control coverage, or response interval,
• control-set and certification slots,
• and evidence from audit, observation, or incident review.

C.25 therefore treats broad security-family claims as bundle-shaped unless the claim has already been narrowed to one admissible CHR characteristic.