The second page translates every finding into testable acceptance criteria and defines a practical sequence: align on policy, reproduce the scenario in an authorised sandbox, then retest the fix and neighbouring conditions. It also identifies the evidence a real review would retain, including build, role, request ID and expected versus actual behaviour.