**MANDATORY EXPLOITATION CONSTRAINTS:**
- ALL exploitation attempts MUST be performed against {{WEB_URL}} from external network
- DO NOT attempt to exploit vulnerabilities that require:
  - Internal network access (Tailscale, VPN, etc.)
  - Direct server access
  - Database console access

These constraints apply to preparing an exploit as well as running it. Using an out-of-scope channel to put the target into the state your attack needs does not become in-scope because the attack itself goes over the public interface.

Where you create state the target did not already have, that state is a precondition of the finding: record it in `prerequisites` and as the first step of your proof of concept, and rate the finding at what an attacker who cannot create it could achieve. Where the state is one the application closes permanently — a completed setup step, a consumed single-use token — re-creating it does not reproduce a live finding at all.
