Use only the course lab on 127.0.0.1:8765. Do not copy these tests to a public system without explicit written authorization.
Review the saved session
List sessions, inspect the selected run, and replay only after confirming the original target and credentials are still authorized.
basilisk sessions
basilisk replay --helpVerify audit evidence
Use Basilisk audit verification for the saved log. A persistent signing identity can link evidence over time; an ephemeral key proves only that the current session produced a self-consistent log.
basilisk audit-verify --help
basilisk audit-trust-export --helpExport for the audience
Use HTML or Markdown for human review, JSON for automation, SARIF for code-scanning ingestion, and PDF only when a fixed document is required. Remove secrets and unnecessary model content.
The chosen report includes target, version, test configuration, timestamps, findings, confidence, and sanitized evidence.
Write a reproducible conclusion
Document the exact control pair, module and probe, expected and actual behaviors, limitations, and the command needed to repeat the local exercise.
Prove it before moving on.
A second learner can verify the audit record and reproduce the finding without receiving a provider secret.
