Red-team evidence record#
Template ID: tpl-red-team-evidence
Version: 1.0.0
Status: educational starter; not a complete threat model, penetration test, safety evaluation, or production assurance record.
Related gates: Assess, Measure, Prove and Review
Starter controls: ctrl-adversarial-testing, ctrl-data-provenance, ctrl-decision-trace
Scope and authorization#
- Case, system and version:
- Test owner and authorized testers:
- Environment and data restrictions:
- Allowed techniques and prohibited actions:
- Stop conditions and emergency contact:
- Threat model or impact hypothesis:
Scenario record#
| Scenario ID | Misuse/failure hypothesis | Preconditions | Procedure | Expected safe behavior | Severity rule |
|---|---|---|---|---|---|
Result record#
| Run ID | Scenario ID | Timestamp | Result | Evidence location/hash | Reviewer |
|---|---|---|---|---|---|
Findings and decision#
- Reproducible finding:
- Affected controls:
- Containment or remediation:
- Retest evidence:
- Residual uncertainty:
- Gate decision and accountable owner:
Source status#
List test references with versions and checked dates. Informative taxonomies do not prove scenario coverage or control effectiveness.
PALO FRAMEWORK