ISO/IEC 14888-3:2018/Amd 1 Introduction, Note 5: The key substitution warning is reworded

What does Introduction, Note 5 require?

Assess key substitution exposure mechanism by mechanism. Where the mechanism is one the note names, record the mitigation you rely on, such as binding the public key into the signed data. Where the mechanism is EdDSA, record that the design includes the binding instead of assuming every implementation is safe.