What Qualifies as a Finding

This template defines a disciplined boundary for red-team reporting by separating claim states that are often conflated in practice. An early signal may indicate a theoretical exposure, but it is not yet a finding. An observed anomaly may suggest a supported failure, yet still require challenge of alternative explanations, confirmation of service and target scope, and retest before it can be treated as reproducible evidence. Only when the evidence shows a qualified path to consequence, the behavior is reproduced, and the result survives analyst review should it be assigned reportable finding state. The framework distinguishes unresolved evidence gaps, rejected or non-reproducible results, and analyst-reviewed findings so that reporting remains precise, defensible, and scoped to demonstrated impact rather than speculation.