Scope an AI audit: build your scoping memo and RCM