Mark Payer-to-Payer data-scope limits as not-yet-enforced

docs/api-reference/operations/davinci-data-export.md

@@ -261,6 +261,10 @@ HTTP/1.1 202 Accepted
 | `hl7.fhir.us.davinci-pdex#provider-snapshot` | Provider Access | Member opt-out applies | Point-in-time snapshot of each member's record |
 | `hl7.fhir.us.davinci-pdex#payertopayer` | Payer-to-Payer | Active opt-in `Consent` asserted at `$bulk-member-match` time | Five-year window; excludes drug PAs, denied PAs, provider remittances, and enrollee cost-sharing |
 
+{% hint style="info" %}
+The `payertopayer` **Data scope** above — the five-year window and the drug-PA / denied-PA / remittance / cost-sharing exclusions — describes the target Da Vinci semantics; it is not yet enforced by the export. The export currently returns the Group's full resource set, so narrow it explicitly with `_type` / `_typeFilter` / `_since`.
+{% endhint %}
+
 ## Errors
 
 | Status | Where | Cause |

docs/interop-apis/payer-to-payer.md

@@ -38,6 +38,10 @@ Five-year window of date-of-service, excluding remittances, cost-sharing, drug p
 | Claims and encounters (no remittance, no cost-sharing) | ExplanationOfBenefit (CARIN BB Non-Financial Basis profiles), Coverage | PDex 2.1.0 |
 | Prior authorization request and decision (excluding drug PAs and denied PAs) | ExplanationOfBenefit (`use=preauthorization`) | PDex 2.1.0 |
 
+{% hint style="info" %}
+The five-year date-of-service window, the remittance / cost-sharing / drug-PA / denied-PA exclusions, and the CARIN BB Non-Financial Basis profiling above describe the target data scope; they are not yet enforced server-side. The export currently returns the Group's full resource set, so narrow it explicitly with `_type` / `_typeFilter` / `_since`.
+{% endhint %}
+
 ## Test dataset
 
 Operation examples below reference this dataset. Load it first to reproduce them.