We have to scope remediation records to projects to prevent leaking
some confidential information through summary attribute to other
projects, just in case if user adds confidential information to that
attribute.