# Response, impact boundaries and clean recovery · Hypothesis and evidence collection plan

Blank workpaper, not completed testing or approval. Do not include secrets or real personal data.

## Hypothesis / supporting observation / benign alternative

[ ] Complete; add evidence and owner.

## Synthetic data / account / tool and version

[ ] Complete; add evidence and owner.

## Requested evidence / source owner / window / uncertainty

[ ] Complete; add evidence and owner.

## Actual result / before-after data / evidence path

[ ] Complete; add evidence and owner.

## Module-specific evidence

- Authority/scope/impact/rollback decision card
- Old-access denial and clean-business-flow evidence
