ClauseRipple's compliance rule is: violation region = vendor processing region - customer allowed region; affected = a dependency path exists and the violation region is non-empty.