Enforcement state inconsistent across approved test-account recovery flow

• —Use only approved accounts, systems, and scenarios.
• —Do not interact with uninvolved people.
• —Do not cause real financial loss.
• —Do not access accounts without authorization.
• —Do not obtain or submit stolen credentials.
• —Do not harass, dox, threaten, or extort anyone.
• —Stop testing if you encounter real victim harm.

Weakness classification

Lifecycle