Use [[engine-trust-boundaries]] to map which surface a claim targets before selecting tools or drawing security conclusions. Baseline the engine branch, game build/hash, platform/ABI, scripting ...