Choose the question
and the rules.
We choose the threat surface, such as information access, aim assistance or input automation, and the coverage question to test. Then we agree on the build, accounts, environment, permitted actions and stop conditions. You authorize the scope before work begins.
