// GLOSSARY

RoE (Rules of Engagement)

Rules of Engagement; the document that defines in writing a test's authority scope, permitted and prohibited actions, the test window, approval gates, the escalation channel and the side-effect control frame. It is the documentary ground of controlled execution and works as the technical annex to the contract. Its function is best understood not through a metaphor but through a difference in timing: RoE moves the decisions to be made in a moment of crisis to before the crisis. When an unexpected critical finding is encountered during a test, a production system is put at risk, or an ambiguity arises at the scope boundary, debating 'what should we do' in that moment both wastes time and raises the risk of a wrong decision. RoE holds and settles this debate in advance: who is informed, which action is halted, which data is protected and how, all in writing. So in a moment of surprise the team executes rather than improvises. NIST SP 800-115 and PTES frame the content of this document. A test run without RoE, however technically skilled, is not legally and operationally defensible.