that can be achieved concerning the claims the product’s vendor makes in
the security target (ST) document about the conformance of the product’s (or
target of evaluation’s) security-enforcing and security-relevant functionality
with security policy rules defined for the TOE. STs say nothing about the