01 / System
Agent version, tools, permissions, autonomy, control configuration and assessment date.
THE EVIDENCE APPROACH
Show the result. Keep the context.
The planned RiskStriker evidence pack connects each conclusion to the system and scenarios tested.
02 / Risk boundaries
The organisation’s risk tolerance, red lines and required failure behaviour.
03 / Environment
Which components were real, test-equivalent, simulated or outside scope.
04 / Coverage
Tested, partially tested, not tested and not observable areas. Scenario quantity alone does not establish assurance quality.
05 / Consequence
Attempted and realised actions, trial counts, maximum observed impact, containment and recovery.
06 / Control verification
The baseline, customer control change, identical-scenario retest and measured difference.
07 / Residual uncertainty
Unresolved failures, inconclusive results, assumptions and limitations.
08 / Tested conditions
A bounded conclusion for the configuration and scenarios assessed, ready for the organisation’s risk review.