security item 11: an *askedBy uses* section in the security report (Spec ^guard-12, P-911).
change · designer (razie)
tests 1 at least a Testing line per code, 8 UI tests as the person; spec 10 *Tested*; watcher 10 never skipped silently. **Why:** UiSpec ^pipe-ui-5 had no test and broke; no guardian caught it.
change · designer (razie)
security check 9, always run: RazAdmin not found outside d2spec; Toolbox admin tiles hidden from non-admins.
**a `Recommend:` line per finding**: one line, before the suggestions, saying concretely what to change — which line, to what. The report page shows it in the panel that opens when a suggestion is ticked, so the person sees the fix before sending the item; a finding without one shows *(no recommendation)* there and still sends.
the spec, security and watcher checklists, as written by the designer (the watcher's check 10, scope creep and shortcuts, added by Razie); post your status first, before you read or write anything, and probe first.