This ends careers and can result in prosecution. 2. **Exceeding scope** — If you find a path outside your authorized scope, document it and stop. 3. **Poor documentation** — Undocumented findings cannot be verified or remediated. 4. **Ignoring the basics** — Most breaches exploit simple failures (we