Coverage section present

Findings section present

Finding endpoint/feature field

Finding preconditions field

Finding evidence field

Finding impact field

Fix recommendation field

Regression test idea field

Attack Path Summary section

Code AND config controls

Exact endpoint context

Endpoint enumeration

HTTP methods documented

Auth requirements noted

Horizontal access control tested

Vertical access control tested

IDOR or insecure object access

Findings prioritized

Coverage section present

Attack Path Summary present

Regression test idea per finding

Code AND config remediation

Non-destructive PoC

Business logic finding

Workflow abuse described

Input handling tested

PoC steps reproducible

PoC non-destructive

Bypass conditions documented

Regression test idea

Code-level fix

Operational/config control

Business consequence stated

Exact endpoint context