# Security review of AI-generated code · Scope and trust boundaries

Blank workpaper, not completed testing or approval. Do not include secrets or real personal data.

## Product / revision / environment

[ ] Complete; add evidence and owner.

## Written authorization, scope and stop contact

[ ] Complete; add evidence and owner.

## Actor / tenant / asset / trust boundary

[ ] Complete; add evidence and owner.

## Assumptions / prerequisites / exclusions

[ ] Complete; add evidence and owner.

## Module-specific evidence

- AI suggestion, human review and test trace
- Package verification and sensitive-input review record