the authorization document defines your legal boundaries 3. **Document everything** — your activity log is your defense if questioned 4. **Understand that the CFAA applies to both criminal prosecution and civil lawsuits** — a client or third party can sue you under the CFAA even if the government do