Delivery is within one day after receiving the public or staging URL, expected behavior, and any required non-production access. Includes one clarification round and one revision. No production credentials are required. AI-assisted investigation; all findings and any patch are manually reviewed and tested.