Follow the observed sequence
Bring available network, API and WAF events into an evidence-backed episode. The source set and coverage are scoped for each evaluation.
- Surface mapping and probing
- Attempted access where visible
- Source gaps and timing limits
