## Report metadata
- Report ID:
- Status: Draft
- Context: Lab / synthetic / public data / authorized professional work
- Date, timezone, environment, and tool versions:
- Author contribution and AI assistance:

## Executive summary
Question, finding, potential impact, confidence, and recommended next action.

## Scope and data provenance
Sources, permission, sanitization, included systems, and exclusions.

## Investigation question and hypotheses
Include plausible benign explanations.

## Method and reproduction
Commands or queries, dependencies, sample inputs, and expected output.

## Evidence timeline
Timestamp with timezone | artifact | observation | source reference

## Findings and uncertainty
Separate direct observations from interpretations. Distinguish severity from confidence.

## Recommended action
Priority | action | proposed owner | trade-off | verification

## Detection validation, if performed
Positive, benign, and boundary cases. Record expected and actual results with counts.

## Limitations and lessons
What was not observed, tested, or established?

## References and artifacts
Safe repository links, sanitized logs, source citations, and correction history.
