# Test plan

Case ID / version:
Authorized task:
Expected behavior:
Attacker goal:
Attacker-controlled surface:
Out-of-scope surfaces:
Trust boundary:
Clean control:
Attack variant (change one factor):
Failure criterion defined before testing:
Useful-task success criterion:
Model / application version / date / settings (or unknown):
Trial count and case count:
Exclusion rule for setup failures:
Raw-input and output record locations:
Observed result:
Alternative explanation:
Limitations: