Security verification handover
Project / client:
Build revision, environment, date and testing authorization:
Agreed roles, fixture data and scope (including exclusions):

Repeat for each business scenario.
Scenario ID and promise to the user:
Prerequisites / synthetic objects:
Allowed operation and observation:
Forbidden operation and observation:
Sanitized evidence reference (no tokens or keys):
Status: verified / issue found / incomplete
Fix owner and due date:
Retest revision, date and outcomes of both controls:

Outstanding risks, decision owner and review date:
Studio representative / client representative: