Buyer Proof Pack
This example shows the intended evidence structure. It is not a certification or customer result.
APPLICATION
Acme Cloud staging
Buyer claim: customer records are isolated between tenants.
Evidence state: verified in the stated staging environment across member and administrator roles. Production was not tested.
Finding and retest
A cross-tenant object reference was reproduced, fixed, and targeted retesting could no longer reproduce the condition.
Observed → candidate access-control gapVerified → non-destructive proofFixed → tenant-bound authorizationRetested → original and adjacent paths blocked