Testers develop risk-based scenarios from the intelligence report, each a storyline with pre-agreed test goals (demonstrated with evidence, not executed), initiation channels and techniques, the chain of tasks, milestones, a timeline per task (failure to finish counts as the institution defending or detecting), and conditions for stopping or for receiving assistance to continue.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.