Function explain_scope 

pub fn explain_scope(
    policy: &CapabilityPolicy,
    declared: ContainmentClass,
) -> ScopeReport

Builds a ScopeReport for policy against this host, with declared as the already- combined floor. Probes the host tier once and reads nothing else.