RoE and attestation — the minimum before going active

Minimum

1. System owner + escalation

2. Time windows and out-of-scope

3. Written attestation

4. Crisis communication channel

ASSESS only. No theatre outside authorization.