; (3) limit the assessment required by subsection (b)(1) to vulnerabilities that have been shown to be— (A) exploited in non-laboratory settings; or (B) feasibly and practicably exploitable in real-world conditions; and (4) consider in the report required by subsection (a) vulnerabilities that have been effectively mitigated by manufacturers of mobile phones and other mobile devices. (e) Form of report The report required by subsection (a) shall be produced in unclassified form but may contain a classified annex. (f) Authorization of appropriations There is authorized to be appropriated to carry out this section $500,000 for fiscal year 2020. Such amount is authorized to remain available through fiscal year 2021. (g) Definitions In this section: (1) Adversary The term adversary includes— (A) any unauthorized hacker or other intruder into a mobile service network