Pure-reference catalog of Session-Based Test Management (SBTM) - the Bachs' framework for running exploratory testing as time-boxed sessions: the session (60-90 min), the charter (Explore X with Y to discover Z), the session-sheet structure, the TBS metrics, the cross-session dashboard, and the PROOF debrief. Use when authoring exploratory-testing charters, reviewing session sheets, or setting up time-boxed test sessions. Distinct from manual-test-debrief (the PROOF debrief template), exploratory-tours-reference (the session themes), and the heuristic catalog hiccupps-f-heuristic.
75
94%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
View guide
Passed
No findings from the security scan
Session-Based Test Management (SBTM) is the dominant framework for managing exploratory testing as a measurable, accountable activity. It was developed by Jonathan Bach + James Bach (1999-2000) and is documented at satisfice.com/sbtm.
The unit of work is a session - a time-boxed (60-90 min) chunk of focused exploratory testing against a mission stated as a charter. Sessions produce session sheets that capture what happened in a structured-enough format for management to aggregate, while leaving room for the tester to learn freely.
This skill is a pure reference consumed by
manual-test-debrief and the
tour-catalogues
(exploratory-tours-reference).
For the canonical heuristic catalogs the tester applies during a
session, see
hiccupps-f-heuristic,
sfdpot-exploratory-heuristic,
fcc-cuts-vids-heuristic,
crusspic-stmpl-heuristic.
Per Jonathan and James Bach's SBTM paper (satisfice.com):
"A session is an uninterrupted block of reviewable, chartered test effort... A session may be short (around 60 minutes) or long (up to about 2 hours). Two hours is generally considered the upper limit because tester focus degrades."
Properties of a session:
A charter states the mission for one session. Per Bach:
Explore <area>
With <tools / resources>
To discover <information>Example: "Explore the cart promo-stacking flow with manual sample inputs to discover discount-application bugs." More charter examples are in references/session-sheet-and-metrics.md.
Charters are not test cases. They state what to investigate and leave the how to the tester's judgment in the session.
A backlog of charters drives multi-session campaigns. The lead
prioritises charters per the test strategy (test-strategy-author)
and the risk register (risk-matrix).
Each session produces a session sheet whose sections are: Charter, Areas, session timings, TBS metrics, Data files, Test notes, Bugs, Issues (meta process problems), and the PROOF debrief. The TBS time-breakdown splits each session into T (test design + execution), B (bug investigation + reporting), and S (setup / overhead), plus Opportunity and Idle. Healthy ranges: T 60-80%, B 10-20%, S 10-15%; T under 50% signals trouble.
Full sheet template, the TBS definitions, and the cross-session dashboard metrics: references/session-sheet-and-metrics.md.
Per
manual-test-debrief - the
post-session debrief structure:
| Letter | Stands for |
|---|---|
| P | Past: what happened in this session |
| R | Results: what was found |
| O | Outlook: what's left to test; suggested follow-up charters |
| O | Obstacles: what blocked the tester |
| F | Feelings: tester's qualitative read on quality |
The lead reviews PROOFs with the tester briefly (5-10 min) before the session sheet is filed.
A full 90-minute session (charter, timings, bugs, issues, TBS, PROOF outlook, and how the lead acts on it) is worked through in references/session-sheet-and-metrics.md.
| Confusion | Reality |
|---|---|
| "SBTM = ad-hoc testing." | SBTM is structured: chartered, time-boxed, reviewed. Ad-hoc has none of those. |
| "Session sheet = test report." | Session sheet captures the journey; test report aggregates outcomes. |
| "Charters = test cases." | Charters state the mission; test cases prescribe steps. |
| "More TBS time = better tester." | Wrong: T% is environment + charter health, not tester skill. |
| "Sessions need to find bugs to be valuable." | Wrong: confirming coverage in a known-clean area is also valuable. |
| "Exploratory testing = unscripted." | Distinct concepts: SBTM is management; unscripted execution is technique. SBTM sessions can be more or less scripted. |
| Anti-pattern | Why it fails | Fix |
|---|---|---|
| Sessions > 2 hours | Focus collapses; quality drops | Hard 2-hour cap |
| Multi-charter sessions | Loses focus; metrics ambiguous | One charter per session |
| Sessions tracked in a spreadsheet that no one reviews | Effort wasted; learning lost | Lead reviews each session within 24h |
| Charter as "test X" | Doesn't direct exploration | Use Explore X with Y to discover Z |
| TBS metrics never used | Throwaway data | Aggregate weekly; drive process change |
| Bug-finding rate as KPI | Incentivises shallow bug-hunting | Charter throughput + dashboard health, not bugs-per-session |
| Session sheets without PROOF | Lose tester's qualitative signal | Always close with PROOF debrief |
hiccupps-f-heuristic,
sfdpot-exploratory-heuristic,
fcc-cuts-vids-heuristic,
crusspic-stmpl-heuristic,
exploratory-tours-reference.manual-test-debrief.