# recon-triage scope file — AUTHORIZED TARGETS ONLY.
#
# Only assets listed here are touched. Anything resolving outside these rules is
# dropped with a logged warning and never scanned. out_of_scope takes precedence.
#
# Domain rules match subdomains: "example.com" also covers "api.example.com".

in_scope_domains:
  - example.com

in_scope_cidrs:
  - 93.184.216.0/24

out_of_scope:
  # Exclude specific hosts or sub-ranges even if they fall under an in-scope rule.
  - internal-only.example.com
  - 93.184.216.200/30