You're probably right, and larger projects need a more formalized framework for CoCs.