I test up to five authorized web flows and deliver a concise evidence pack: requirement-to-test matrix, reproducible defect steps, expected versus actual behavior, severity and impact, screenshots or logs where useful, and a prioritized fix list. The same checks are rerun after fixes to produce regression evidence. Load, security, destructive, or production-impacting tests require explicit written authorization and separate scope.