Trust Authority before action
Clear authority.
Controlled testing.
Agree who can authorise the work, which systems can be tested, and when the team must stop. Those decisions come before the first test.
A clear point to stop.
01 / Authorise the work
Know what
is authorised.
Before an evaluation starts, authority, environment and operating limits should be legible to the people accountable for the result.
Written approval should name the systems, permitted actions and operating limits—not just give permission to test.
- 01
Authority
Who can approve the work, and who can pause it.
- 02
Boundary
The systems, identities, actions and exclusions that define the work.
- 03
Conditions
The time window, safety limits and route for an unexpected change.
02 / Work within the agreement
New exposure?
Pause. Confirm.
The next action must match the written scope. If a new system, identity, third-party boundary or operational risk appears, pause and clarify.
Explore assessment services
03 / From observation to confidence
Evidence should
support a decision.
A finding becomes useful when the conditions, causal path and uncertainty remain attached to it.
- 01
Capture the condition
Record only what explains the observed state and the conditions around it.
- 02
Keep evidence proportional
Minimise unrelated sensitive material and use the agreed handling route.
- 03
Explain the path
Tie observation, cause, impact and uncertainty together.
- 04
Retest the control
When commissioned, revisit the demonstrated condition and record what changed.
Evidence handling, retention and report format are agreed for each engagement.
04 / Pause is a control
When conditions move,
escalate.
A responsible assessment has a decision route before a difficult decision is needed.
- Scope no longer matches
- Stop and clarify the boundary.
- An unapproved party may be affected
- Do not proceed into that surface.
- Risk changes beyond agreement
- Pause and use the agreed contact route.
- Evidence cannot be gathered safely
- Choose a less invasive method.
05 / Useful confidence
Report to the person
who can act.
A practical report distinguishes observation from hypothesis, shows what was tested, and makes remaining uncertainty explicit.
For a high-level enquiry, use the public contact route. Do not include credentials or sensitive artefacts in an initial message.
team@genaura-labs.comAuthority, evidence, escalation
What will
the test cover?
Tell us the system, the decision you need to make and the conditions that matter. We can define an assessment that is deliberate from the first step.