Blacklisting aims to discourage rulebreaking, but ambiguity over the project’s scope raises concerns.