...
You can use the -include-tag and -exclude-tag options to filter the rules which will are used in your call to the compliance test command. The way the tags are considered means that set of include tags is used before the set of negative tags is removed. In the diagram above, only the rules with tags in set A and NOT in B will be used to select Compliance Rules . In set theory this is (formally referred to as the 'relative complement of B in A, or more formally B ∖ A.')