Scanner limitations
NOT_DETECTED is not proof of non-exposure. The frozen scanner can miss dynamically constructed identifiers, unsupported languages/formats, generated code, unscanned repositories, runtime configuration, ambiguous parser logic, or customer-specific behavior.
A confirmed parser finding is not an accounting, currency, reconciliation, or business-logic audit.
The tool does not call Amazon or verify runtime activity.